In the nation’s capital, Krispy Kreme has reached a $1.6 million settlement stemming from a class action lawsuit linked to a data breach in 2024 that compromised personal information. The breach impacted the data of 161,676 current and former employees of the popular doughnut chain, as outlined in the settlement agreement.

The data breach came to light on November 29, 2024, with notifications to those affected starting in June 2025, according to the documents related to the settlement. Despite denying any fault or liability, Krispy Kreme has opted to settle the lawsuit.

Employees affected by this breach are entitled to file for reimbursement up to $3,500 for documented financial losses directly resulting from the data exposure. Alternatively, they can choose to receive a cash payment, estimated at around $75.

This class action settlement is specifically for the nearly 162,000 employees whose data was compromised in 2024. The settlement does not extend to individuals who were not employed by Krispy Kreme at that time.

Class members are eligible for up to $3,500 in reimbursement for documented losses related to the breach, or can receive a cash payment of around $75. 

For this settlement, class members include the nearly 162,000 Krispy Kreme employees who had their data exposed in 2024. If you were not a Krispy Kreme employee, you don’t qualify. 

Those who may be owed money from the settlement were sent a postcard notice with an ID and PIN. If you didn’t get a notice or lost yours, contact the Settlement Administrator at info@KrispyKremeDataSettlement.com or 1-877-239-1879 for assistance.

The settlement was given initial approval in federal court last month. 

You can submit a claim here at krispykremedatasettlement.com. Claims must be submitted online, or be postmarked in the mail, by June 22, 2026. 

The court will decide whether to approve the settlement at a hearing on July 6, 2026.