Krispy Kreme $1.6M Data Breach Settlement

Krispy Kreme has agreed to a $1.6 million class-action settlement following a data breach discovered on November 29, 2024. The breach, for which the Play claimed responsibility, exposed sensitive personal information including names, dates of birth, Social Security numbers, and financial account information of approximately 161,000 current and former employees in the United States. Eligible individuals can claim up to $3,500 for documented losses or an estimated $75 cash payment without documentation, along with one year of free credit monitoring. Krispy Kreme denied wrongdoing but settled to avoid further litigation and has committed to implementing additional security measures. The deadline for claims is June 22, 2026, with a final court approval hearing scheduled for July 6, 2026, in North Carolina. The incident also resulted in an estimated $11 million in lost U.S. revenue and $4.4 million in cybersecurity remediation costs for Krispy Kreme.