Data breach settlements are moving through the courts at a steady clip in 2026, and several still have open claim windows a consumer can file today. If a company lost your personal information in the last few years, there is a decent chance you are eligible for a payment somewhere between $25 and several thousand dollars, depending on the case and what you can document. The list below covers the settlements accepting claims now, the larger deals waiting on final court approval, and the major breaches where no money is yet available.
Settlements Accepting Claims Right Now
If you received a notification letter from any of the companies below, you can still file. Each case has a firm deadline, and no claims are accepted after it passes.
- Comcast — $117.5 million. Covers roughly 31.6 million customers whose data was exposed in the October 2023 Citrix-related attack. Claims are due September 14, 2026. Up to $10,000 for documented out-of-pocket losses, up to $150 for lost time, or an estimated $50 alternative cash payment, plus identity defense and restoration services for all claimants. Final approval hearing set for August 5, 2026.1Comcast Breach Settlement. Hasson v. Comcast Cable Communications Settlement2Comcast Breach Settlement. Hasson v. Comcast Cable Communications FAQ
- Labcorp/AMCA — $35 million. Arising from the American Medical Collection Agency breach. Claims are due September 3, 2026. Up to $5,000 for documented losses, or an estimated $50 with no proof required, plus two years of medical data monitoring.3ClassAction.org. $35M Labcorp Settlement Reached in Lawsuit Over AMCA Data Breach
- Flagstar Bank — $31.5 million. About 2.2 million consumers affected by two 2021 cyberattacks. Claims due August 11, 2026. Up to $25,000 for documented losses, an estimated $60 residual payment, and three years of credit monitoring.4Flagstar Settlement. Angus et al. v. Flagstar Bank Settlement
- Lakeview Loan Servicing — $26 million. Roughly 5.8 million mortgage customers whose data was exposed during a 41-day breach in late 2021. Claims due June 22, 2026. Up to $5,000 for documented losses, plus pro rata payments.5National Mortgage News. Bayview to Pay $26 Million to Settle Data Breach Claims
- 700Credit — $17.5 million. About 5.8 million people whose data was accessed through compromised dealer credentials in October 2025. Final approval hearing set for December 15, 2026. Up to $2,500 for documented losses, an estimated $50 cash payment, and two years of credit monitoring.6ClassAction.org. $17.5M 700Credit Settlement Resolves Class Action
- LastPass — $8.2 million. U.S. residents whose accounts were compromised in the 2022 breach. Claims due July 2, 2026. A $25 statutory payment up to $10,000 for extraordinary losses, with a separate pool of up to $900,000 reserved for verified cryptocurrency losses.7Top Class Actions. $8.2M LastPass Data Breach Class Action Settlement
- Cadence Bank (MOVEit) — settlement fund. Claims due June 4, 2026, offering up to $10,000 for extraordinary losses, up to $2,500 for ordinary losses, or an alternative cash payment of up to $100.8MOVEit Cadence Settlement. In Re MOVEit Customer Data Security Breach Litigation – Cadence Bank
- Avis — $1.02 million. Nearly 300,000 people affected by the August 2024 rental car breach. Claims due June 21, 2026. Up to $5,000 for documented losses.9USA Today. Avis Data Breach Settlement
Smaller settlements with June and July 2026 deadlines include Complete Payroll Solutions ($2.6 million, due June 18), Krispy Kreme ($1.6 million, due June 22), Illinois Bone and Joint Institute (due July 1), and Cardiovascular Consultants (due July 1).10Top Class Actions. 10 Class Action Settlements You Can Claim in June 2026
Large Settlements Awaiting Final Approval or Payout
AT&T — $177 Million
AT&T agreed to $177 million to resolve claims from two 2024 breaches affecting about 73 million current and former customers. The fund is split between $149 million for the first incident and $28 million for the second. The claim deadline was December 18, 2025, and roughly 4.38 million claims were filed.11Clarion Ledger. How Much Money Can You Get From the AT&T Settlement12Bright Defense. AT&T Data Breach A final approval hearing was held January 15, 2026, but no ruling had issued as of mid-2026. Because of the volume of claims, individual payouts are expected to fall well below the stated maximums of $5,000 and $2,500 for documented losses. AT&T has not admitted liability.13Telecom Data Settlement. In Re AT&T Inc. Customer Data Security Breach Litigation
Kaiser Permanente — Up to $47.5 Million
Kaiser Foundation Health Plan agreed to at least $46 million, potentially $47.5 million, over allegations that third-party tracking tools on its websites and apps disclosed patient information. The class covers roughly 13.1 million people who logged into a Kaiser portal between November 2017 and May 2024. The claim deadline was March 12, 2026, with final approval scheduled for late April 2026. Individual payouts were estimated at roughly $21 to $42.14ClassAction.org. Up to $47.5M Kaiser Settlement Ends Class Action Lawsuit15HIPAA Journal. Kaiser Permanente Website Tracker Breach Affects 13.4 Million Individuals
23andMe — $46.75 Million
The 2023 breach at 23andMe, now legally Chrome Holding Co., affected approximately 6.9 million U.S. customers. A bankruptcy administrator proposed a $46.75 million payout, with about $14.3 million already disbursed to the settlement administrator by mid-2026 and $32.5 million earmarked to resolve consolidated class actions. Individual payouts range from $50 to $10,000 for extraordinary claims, and more than 255,860 claims had been resolved as of June 10, 2026.16Insurance Journal. 23andMe Agrees to $46.75 Million Data Breach Settlement17Reuters. California Sues 23andMe Over 2023 Data Breach The company filed for Chapter 11 in March 2025, and its assets were bought by TTAM Research Institute, a nonprofit controlled by co-founder Anne Wojcicki, for $305 million.
City of Hope — $8.5 Million
City of Hope National Medical Center’s $8.5 million settlement covers 774,038 individuals whose health information was compromised in a September–October 2023 breach. Final approval was granted February 20, 2026, and the claim deadline was January 13, 2026. Claimants could receive up to $5,000 for documented losses, a $100 alternative cash payment, or an additional $250 for California residents.18City of Hope Data Breach Settlement. In Re City of Hope Data Security Breach Litigation – Documents19ClassAction.org. $8.5M City of Hope Settlement Ends Class Action Over 2023 Data Breach
Payouts Already Distributed
T-Mobile — $350 Million
The T-Mobile settlement finished distributing payments in May 2025. Valid claimants who filed by the January 2023 deadline received $25 to $100 in general relief depending on state of residence, with California residents at the top of that range. Those with documented identity theft or fraud losses could receive up to $25,000. Claimants whose electronic payments failed were contacted in November 2025 and have until March 31, 2026, to request a reissue. Free identity monitoring and restoration services remain available to class members who did not file a claim.20T-Mobile Settlement. T-Mobile Data Breach Settlement
Equifax — Up to $425 Million
The Equifax settlement over the 2017 breach affecting roughly 147 million people has distributed its final round of payments. Final distributions went out between November and December 2024, and a supplemental round was added to existing prepaid cards in August 2025.21Equifax. Equifax Statement on Final Payments in Data Breach Settlement22Nolo. Equifax Data Breach Settlement: How to Get Compensation Free identity restoration services remain available through January 2029 regardless of whether you filed a claim, and all U.S. consumers are entitled to seven free Equifax credit reports per year through 2026.23FTC. Equifax Data Breach Settlement
Major Breaches With No Settlement Yet
Some of the biggest breaches on record have no consumer payout available. If you were affected by any of these, there is currently no claim to file.
Change Healthcare. The February 2024 ransomware attack on the UnitedHealth Group subsidiary exposed personal and medical information for an estimated 190 million people, the largest healthcare breach on record.24Security.org. Change Healthcare Data Breach Dozens of consumer and provider suits have been consolidated in the U.S. District Court for the District of Minnesota, with fact discovery running through November 2, 2026. No settlement exists yet.25U.S. District Court, District of Minnesota. Change Healthcare Inc. Data Breach
MOVEit Transfer. The 2023 exploitation of Progress Software’s file-transfer tool hit more than 600 organizations and an estimated 93 million individuals. Settlements are emerging company by company rather than as a single global deal. Nuance Communications, a Microsoft subsidiary, agreed to $8.5 million covering more than 1.2 million people, with a final approval hearing set for March 18, 2026. Cadence Bank’s settlement (above) is open for claims. More than 100 other MOVEit-related suits remain pending, and claims against Progress Software itself are unresolved.26HIPAA Journal. Nuance Communications MOVEit Data Breach Settlement
Ticketmaster. Ticketmaster and parent Live Nation face class actions in the U.S. and Canada following a May 2024 breach that reportedly exposed data belonging to as many as 560 million customers. The stolen data was offered for sale on the dark web for $500,000 by a group known as “ShinyHunters.” The companies acknowledged the breach in a May 31, 2024, SEC filing. No settlement has been reached.27Consumer Law Group. Ticketmaster Data Breach Canadian Class Action
How to File a Claim and What to Expect
The process is largely the same across cases. If your data was involved, the company likely sent you a notification by mail or email containing a unique class member ID needed to file. Claims go in through a dedicated settlement website or by mail, and each case has a firm deadline.
To get the most out of a claim, keep the breach notification letter, any records of fraudulent charges or identity theft you have experienced, receipts for any credit monitoring you paid for on your own, and notes on time you spent dealing with the fallout. Benefits generally fall into two tiers: a flat cash payment requiring no proof of harm, typically $25 to $100 in recent cases, and a higher reimbursement for documented out-of-pocket losses that commonly caps between $5,000 and $25,000.
Payouts rarely arrive quickly. The gap between a breach and final distribution usually runs one to three years, and payments go out only after a court grants final approval and any appeals are resolved. In high-claim cases like AT&T, pro rata adjustments can push individual checks well below the stated maximums. Miss the deadline and you generally lose the cash, though non-monetary benefits like credit monitoring sometimes remain available longer.