First, make sure the notice is real
Breach notices arrive by mail or email from the company that was hacked, or from a firm it hired. Scammers copy them. A real notice explains what happened, what kind of information was involved and what the company is offering, and it doesn't ask you to pay anything or to confirm your full Social Security number or a password.
If you're unsure, don't use the phone number or link in the message. Look up the company's own website or call a number you already trust, and check whether it has posted a notice about the incident.
Step 1: Change passwords and turn on two-step sign-in
If a password, security question or account number was exposed, change it on that site first, then on any other site where you used the same password. Turn on two-step verification (a code from an app or text) wherever it's offered, starting with email, banking and phone accounts.
Step 2: Freeze your credit if your SSN was exposed
A credit freeze stops new lenders from pulling your credit report, which blocks most attempts to open accounts in your name. Freezing and unfreezing is free by law, and it doesn't hurt your credit score. You need to place it separately at each of the three national credit bureaus, and you can lift it for a while when you apply for credit yourself.
A fraud alert is a lighter option: it asks lenders to verify your identity before opening an account. Placing one at one bureau adds it at all three, and a standard alert lasts one year.
Official freeze pages: Equifax (opens in a new tab), Experian (opens in a new tab) and TransUnion (opens in a new tab).
Step 3: Watch your accounts and credit reports
Look over your bank, card and insurance statements for charges or claims you don't recognize, and report them to the company right away. You can get free credit reports from all three bureaus at AnnualCreditReport.com, the official site. Look for accounts, addresses or inquiries you don't recognize.
If health information was involved, read the explanation of benefits statements from your insurer for care you never received. If your Social Security number was involved, you can ask the IRS for an Identity Protection PIN, which helps stop someone from filing a tax return in your name.
Official sites: AnnualCreditReport.com (opens in a new tab) for free credit reports and the IRS Identity Protection PIN page (opens in a new tab).
Step 4: If someone uses your information
Report identity theft to the Federal Trade Commission at IdentityTheft.gov. It creates a recovery plan and an official report you can show to banks and credit bureaus. Keep copies of everything, and write down the time you spend fixing problems, since some breach settlements pay for it.
Official site: IdentityTheft.gov (opens in a new tab) from the Federal Trade Commission.
How data breach settlements usually pay
When a breach leads to a class action and the company settles, the settlement usually offers a few kinds of benefits. Most let you pick a flat or pro rata cash payment that needs no proof, or a larger reimbursement for documented out-of-pocket losses, such as fraud charges you weren't paid back, credit freeze or monitoring costs, or postage and copying fees. Many also pay for a few hours of lost time spent dealing with the breach, and include free credit or identity monitoring for a set period.
Pro rata means a fixed fund is divided among valid claims, so the final amount depends on how many people file. The settlement's official notice lists the exact options, limits and deadline, and only that notice and the official settlement website count.
Keep records, because they can mean a bigger payment
Documented loss claims need proof, such as bank statements showing fraud charges, receipts for credit monitoring you bought, or letters from the IRS. Save the breach notice itself too, since it often has the notice ID or claim ID the claim form asks for. If you get a postcard or email about a settlement, go to the official settlement website directly and file there. Filing is free, and you don't need a claim service or a lawyer.
Open data breach settlements
These breach settlements are taking claims now. Each page links to the official claim site.
- ConnectOnCall data incident, deadline November 2, 2026
- Furniture Mart USA data breach, deadline November 3, 2026
- Summit Medical Group data incident, deadline November 4, 2026
- SitusAMC data incident, deadline November 6, 2026
- California Casualty data incident, deadline November 16, 2026
- Laboratory Services Cooperative data incident, deadline November 24, 2026
- Educational Computer Systems (ECSI) data breach, deadline December 21, 2026
- Covenant Health data incident, deadline December 30, 2026
- AMCA data breach: Clinical Pathology Laboratories / Austin Pathology (Sonic), deadline January 4, 2027
- DaVita ransomware data breach, deadline January 19, 2027
- Kisco Senior Living data incident, deadline January 19, 2027
- Columbia University data breach (May 2025), deadline January 21, 2027
- Warner Music Group online store data breach (2020), deadline January 22, 2027
See all data breach settlements
New to settlement claims? Read our plain-English guide to filing a class action claim.
FAQ
Should I freeze my credit after a data breach?
If your Social Security number was exposed, a credit freeze at all three bureaus is one of the most effective steps. It's free, it doesn't affect your score, and you can lift it when you apply for credit.
Is a data breach settlement email legit?
It might be, but go to the official settlement website directly instead of clicking the email's links. Real settlement sites name the court case and the administrator, and filing is always free.
Do I need proof to file a data breach settlement claim?
Usually not for the basic cash payment. Proof is needed only if you claim reimbursement for documented losses, which often pays more.
Can I claim for time I spent dealing with the breach?
Many data breach settlements pay for a few hours of lost time, usually with a short statement describing what you did. Check the official notice for each settlement.
Will filing a claim cost me anything?
No. Filing on the official settlement website is free. Be wary of anyone who asks for a fee or a share of your payment to file for you.