Data Breach Settlement Calculator
Find your breach and what it pays: DentaQuest, Lakeview Loan Servicing, CareCloud, ZOLL, Unlimited Technology Systems and 30+ more cases tracked one by one — then estimate your own payout from the data exposed and the harm you can document.
How much is the average data breach settlement per person? Average per-person payouts vary widely depending on the type of data exposed and the severity of harm. Email-only breaches typically pay $25-$100, financial data breaches $100-$500, SSN exposures $250-$1,000, and medical record breaches $500-$2,500.
Data Breach Settlement Estimator
$500M Settlement Fund
Est. 5,000,000 eligible claimants
Your Details
Your Estimated Payout
$16 — $24
Your Case Details
Answer a few questions to see your estimated range.
Heavier use = larger share of distribution funds.
Estimated Per-Claimant Payout
$63 — $117
Class action distributions depend on how many people claim. The fewer claimants per fund, the higher each payout. This estimate uses average claim rates.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
Specific Breach Settlements We Track
Looking for a particular breach? These dedicated trackers carry the fund size, per-person payout structure, and claim deadline for each case — several windows are open right now.
TransUnion (4.4M+ affected)
Credit bureau breach of July 2025 — MDL 3170 in Chicago before Judge Gettleman, 54 cases, no settlement yet
Allianz Life (1,497,036 affected)
July 2025 breach of a cloud system — all cases before one judge in Minnesota, no settlement yet
Farmers Insurance (1.1M+ customers)
May 2025 intrusion, letters three months later — litigation consolidating in California, no settlement yet
The Salesforce customer breaches (overview)
Why the federal panel refused a combined Salesforce case, and which court has yours
Conduent (62.2M affected)
3rd-largest healthcare breach in US history — consolidated litigation active, no settlement yet
Frontier Airlines (2026)
SSNs + passports exposed in twin May–June 2026 intrusions — three class actions filed, no settlement yet
Amgen (patient data, 2026)
Patient health data stolen from cloud systems per SEC filing — firms investigating, no suit filed yet
Beckett Collectibles (~1M accounts)
Collector names, emails and addresses exposed — class action filed August 2026, no settlement yet
Heights Finance (2026)
SSNs + full bank account data of borrowers exposed — firms investigating, no suit filed yet
WellPoint Texas (101K members)
Medicaid members' data reported breached August 2026 — firms investigating, no suit filed yet
Maine Course Hospitality (~7,200)
SSNs + health data, notified 8 months late — class action filed August 2026
RUS Industrial (4,343+ affected)
SSNs + credit/debit card numbers exposed — two firms investigating
USA DeBusk (2026)
SSNs, passports, bank data, medical info and passwords — firms investigating
Universal Plant Services (2026)
June 2026 network intrusion — SSNs + financial accounts, firms investigating
ABC Supply (2026)
SSNs + driver's licenses per Massachusetts filing — firms investigating
Lone Star Community Health (250K patients)
SSNs + medical data exposed via vendor Aesto Health — firms investigating
Kovack Financial (2026)
Broker-dealer breach — SSNs + financial accounts, nearly a year to notice
Talen Energy (2026)
SSNs + medical record numbers per Massachusetts filing — early stage
Nipro Medical (2026)
SSNs + credit/debit card numbers — firm investigating
Minnesota ENT (2026)
Six hacked email accounts — patient SSNs + medical info, firms investigating
Bahrie Law (2026)
Law-firm client files — SSNs, financial + health records, firm investigating
WilmerHale (Luna Moth wave)
No settlement and no claim form — but free Experian monitoring must be claimed by Oct 31, 2026
Carnival (~6M affected)
April 2026 breach — three class actions filed, no settlement yet
CareCloud (~411K patients)
March 2026 health-record breach — firms investigating
DentaQuest (15M+ affected)
Notice letters out since Jul 17 — no settlement yet, honest tracker
Unlimited Technology Systems
Kroll notice letters out July 2026 — what the letter means, no settlement yet
700Credit ($17.5M — 5.8M affected)
Auto-dealer credit vendor breach — claims closed Sept 22, 2026; approval hearing Oct 7
Doxim ($5.5M — 1.1M affected)
Credit-union statement vendor — postcards out now, file by Oct 13, 2026
McGraw Hill (13.5M emails)
April 2026 ShinyHunters leak — no settlement yet, honest tracker
Comcast Xfinity ($117.5M)
Oct 2023 Citrix breach — approved Aug 2026, claims now closed
LabCorp / AMCA ($35M)
2018–19 billing-vendor breach — claims closed Sep 3, 2026
ZOLL “Heart Device Data” ($3.5M)
LifeVest patients — claims closed Sep 2, 2026, hearing Sep 23
Lakeview Loan Servicing ($26M)
Claims closed Jun 22 — payout status for filers
Lands’ End (employees)
Dec 2024 breach — claims open until Oct 22, 2026
STIIIZY ($2.95M)
Cannabis IDs exposed — claims closed Sep 10, 2026
HCIactive (3M affected)
No settlement yet — honest status tracker
Banner Health ($20/person)
Pixel-tracking settlement — $20 claim deadline Sep 5, 2026
Medtronic (3.8M affected)
No settlement yet — status tracker
Bank of America
IMS/Infosys McCamish breach tracker
Prosper Marketplace
2024 breach — settlement status
Experian Class Actions
All four cases — settled + active
Latest Breach Developments
What actually changed recently — approvals, mailing dates, deadlines, and the cases where nothing has been decided yet.
Why a Bank Software Company You May Never Have Heard Of Had Your Data: Finastra’s $3.125 Million Breach Settlement Covers About 888,393 People — $3.52 Each on Paper, Before Up to 37.8% Could Go to Attorneys’ Fees and Costs. Claims Close November 27.
Wellstar’s $4.25 Million MyChart Pixel Settlement Is $4.89 per Patient on Paper. About 870,000 People Are in the Class, Email Is the Primary Notice, and Only Those Who File Split What Is Left After the Lawyers’ Third. Claims Close November 10.
Labcorp Is Paying 44 Attorneys General $2,287,455 Over the 2019 AMCA Breach — About 22 Cents per Affected Patient, Paid to the States, With No Claim Form. The Patients’ Own $35 Million Settlement Stopped Taking Claims on September 3.
Urban One’s $675,000 Data Breach Settlement Won Final Approval on September 25: About 13,778 People, $48.99 a Head, and a No-Proof Payment Capped at $500 That the Fund Can Pay in Full to No More Than About 890 of Them. Claims Close October 12.
DAP Health’s $1.3 Million Breach Settlement Covers 129,973 People — $10 a Head Before Fees. The $25 Is an Estimate Paid Last, After Lawyers, Administration, Monitoring, Receipts and a $75 California Payment. Final Hearing October 1, Claims Close October 21.
Autobell’s Car Wash Breach Settlement Pays a Flat $45 — Not an Estimate, No Pro Rata Cut — to Any of 52,714 Notified People Who Files. The Complaint Says They Are Current and Former Workers, Not Customers, at a Chain That Employs About 3,000 a Year. Up to $5,000 With Receipts; Claims Close November 12.
How Data Breach Settlements Work
When a company fails to protect your personal data and a breach occurs, affected individuals can seek compensation through a class action lawsuit. If the case settles, the company pays into a settlement fund that is distributed among class members who file valid claims. The amount each person receives depends on the type and sensitivity of data exposed, whether they suffered actual financial harm, and the total number of claims filed.
Data breach settlements have grown significantly in recent years. The Equifax breach resulted in a $700 million settlement, T-Mobile paid $350 million, and Facebook/Meta settled for $725 million. These landmark cases established precedents for how companies are held accountable for data security failures and how compensation is calculated for affected consumers.
Our calculator uses data from dozens of settled class action cases to estimate your potential payout. The key variables are the sensitivity of compromised data (medical records command the highest compensation), whether you experienced actual identity theft, and how the breached company handled disclosure. See our methodology page for details on how we generate estimates.
Average Data Breach Settlement Amounts by Data Type
| Data Type | Typical Range | Notes |
|---|---|---|
| Email / username only | $25 – $100 | Lowest tier; limited harm documented |
| Financial data (cards, bank info) | $100 – $500 | Higher if fraudulent charges occurred |
| Social Security Number | $250 – $1,000 | Requires credit monitoring; high identity theft risk |
| Medical / health records | $500 – $2,500 | HIPAA violations increase settlement value |
| Identity theft occurred | $1,000 – $10,000+ | Documented financial harm significantly increases payout |
Ranges based on analysis of settled class action lawsuits from 2018-2026. Individual results vary based on specific case details and number of claimants.
Major Data Breach Settlements
| Company | Settlement | Affected | Per Person |
|---|---|---|---|
| Equifax (2019) | $700M | 147 million | $125 - $20,000 |
| T-Mobile (2022) | $350M | 76.6 million | $25 - $25,000 |
| Facebook/Meta (2023) | $725M | 87 million | $30 - $5,000 |
| Capital One (2022) | $190M | 100 million | $25 - $25,000 |
| Yahoo (2020) | $117.5M | 3 billion | $25 - $375 |
| Anthem (2018) | $115M | 78.8 million | $50 - $10,000 |
Settlement amounts are approximate and based on publicly available court filings and press reports. Per-person ranges reflect base payments to documented identity theft claims.
Factors That Affect Your Data Breach Payout
- Type of Data Exposed: The sensitivity of your compromised data is the single biggest factor in your payout. Medical records and Social Security numbers command the highest compensation because they create the greatest risk of identity theft and financial harm. Email-only breaches receive minimal payouts because the data has limited exploitability.
- Documented Financial Harm: Claimants who can prove actual financial losses — such as fraudulent charges, costs of credit monitoring, time spent resolving identity theft, or lost income — receive significantly higher payouts. Keep receipts, bank statements, and records of time spent dealing with the breach aftermath.
- Company Response Time: Companies that delayed disclosure or attempted to conceal a breach often face larger settlement funds and higher per-person payouts. Delayed notification gives attackers more time to exploit stolen data, increasing the harm to affected individuals. Most state laws require notification within 30-90 days.
- Scale of the Breach: Larger breaches typically result in bigger settlement funds but more claimants. Paradoxically, smaller breaches with fewer affected individuals sometimes yield higher per-person payouts because the pool of claimants is smaller relative to the fund size.
- Regulatory Environment: Breaches involving HIPAA-protected health data, CCPA-covered California residents, or data from children (COPPA) often result in higher settlements due to additional regulatory penalties and statutory damages. State privacy laws like the Illinois BIPA have led to some of the largest per-person payouts in data privacy history.
How to File a Data Breach Settlement Claim
- Check your eligibility. Confirm that you had an account with the breached company during the class period. Look for notification letters or emails from the company or settlement administrator.
- Gather documentation. Collect evidence of your account, any fraudulent activity, out-of-pocket expenses (credit monitoring, identity theft protection), and time spent resolving issues. Bank statements, police reports, and FTC identity theft reports strengthen your claim.
- File your claim online. Visit the official settlement website listed in your notification. Complete the claim form and upload supporting documentation. Most settlements allow online filing with a deadline 60-180 days after notification.
- Wait for processing. Settlement administrators review claims after the filing deadline. Payouts typically arrive 6-18 months after final court approval, via check, direct deposit, or digital payment depending on the settlement terms.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Frequently Asked Questions
What qualifies as a data breach settlement?
A data breach settlement is a legal resolution of a class action lawsuit filed against a company that failed to adequately protect personal data. When a company experiences a data breach that exposes customer information — such as Social Security numbers, financial data, or medical records — affected individuals can join a class action to seek compensation. Settlements are reached when the company agrees to pay a fund to affected users rather than go to trial.
How much is the average data breach settlement per person?
Average per-person payouts vary widely depending on the type of data exposed and the severity of harm. Email-only breaches typically pay $25-$100, financial data breaches $100-$500, SSN exposures $250-$1,000, and medical record breaches $500-$2,500. If you experienced actual identity theft, payouts can reach $10,000 or more. The Equifax settlement, for example, offered up to $20,000 for documented identity theft victims.
How do I join a data breach class action settlement?
Most data breach settlements require you to file a claim through the official settlement website before the filing deadline. You typically need to provide proof that your data was in the breached system (such as an account with the company during the breach period) and documentation of any losses. The breached company or settlement administrator usually sends notification to affected individuals by email or mail. You can also check sites like classaction.org or the FTC's website for active settlements.
What is the statute of limitations for data breach lawsuits?
The statute of limitations for data breach claims varies by state and legal theory. Most states allow 2-4 years from the date you discovered (or should have discovered) the breach. Some states, such as California under the CCPA, have specific data privacy statutes with their own timelines. Federal class actions may have different deadlines. It's important to act quickly once you learn about a breach, as missing the filing deadline means you cannot participate in the settlement.
Why do data breach settlements pay so little per person?
Data breach settlements divide a fixed fund among all valid claimants. When millions of people are affected, even a $700 million fund (like Equifax) results in modest per-person payments for those without documented losses. The more claims filed, the less each person receives. However, individuals who can document actual financial harm — such as identity theft, fraudulent charges, or time spent resolving issues — typically receive significantly higher payments from a separate tier of the settlement fund.
What recent data breach settlements can I still file claims for?
Active class action settlements change frequently. Major recent settlements include those involving T-Mobile, 23andMe, AT&T, and various healthcare providers. Check the official settlement notice you received, the FTC's refund page (ftc.gov/refunds), or class action tracking websites for current filing deadlines. Many settlements remain open for claims for 60-180 days after the initial notification period.