Data Breach Settlement Calculator
Find your breach and what it pays: DentaQuest, Lakeview Loan Servicing, CareCloud, ZOLL, Unlimited Technology Systems and 30+ more cases tracked one by one — then estimate your own payout from the data exposed and the harm you can document.
How much is the average data breach settlement per person? Average per-person payouts vary widely depending on the type of data exposed and the severity of harm. Email-only breaches typically pay $25-$100, financial data breaches $100-$500, SSN exposures $250-$1,000, and medical record breaches $500-$2,500.
Data Breach Settlement Estimator
$500M Settlement Fund
Est. 5,000,000 eligible claimants
Your Details
Your Estimated Payout
$16 — $24
Your Case Details
Answer a few questions to see your estimated range.
Heavier use = larger share of distribution funds.
Estimated Per-Claimant Payout
$63 — $117
Class action distributions depend on how many people claim. The fewer claimants per fund, the higher each payout. This estimate uses average claim rates.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
Specific Breach Settlements We Track
Looking for a particular breach? These dedicated trackers carry the fund size, per-person payout structure, and claim deadline for each case — several windows are open right now.
TransUnion (4.4M+ affected)
Credit bureau breach of July 2025 — MDL 3170 in Chicago before Judge Gettleman, 54 cases, no settlement yet
Allianz Life (1,497,036 affected)
July 2025 breach of a cloud system — all cases before one judge in Minnesota, no settlement yet
Farmers Insurance (1.1M+ customers)
May 2025 intrusion, letters three months later — litigation consolidating in California, no settlement yet
The Salesforce customer breaches (overview)
Why the federal panel refused a combined Salesforce case, and which court has yours
Conduent (62.2M affected)
3rd-largest healthcare breach in US history — consolidated litigation active, no settlement yet
Frontier Airlines (2026)
SSNs + passports exposed in twin May–June 2026 intrusions — three class actions filed, no settlement yet
Amgen (patient data, 2026)
Patient health data stolen from cloud systems per SEC filing — firms investigating, no suit filed yet
Beckett Collectibles (~1M accounts)
Collector names, emails and addresses exposed — class action filed August 2026, no settlement yet
Heights Finance (2026)
SSNs + full bank account data of borrowers exposed — firms investigating, no suit filed yet
WellPoint Texas (101K members)
Medicaid members' data reported breached August 2026 — firms investigating, no suit filed yet
Maine Course Hospitality (~7,200)
SSNs + health data, notified 8 months late — class action filed August 2026
RUS Industrial (4,343+ affected)
SSNs + credit/debit card numbers exposed — two firms investigating
USA DeBusk (2026)
SSNs, passports, bank data, medical info and passwords — firms investigating
Universal Plant Services (2026)
June 2026 network intrusion — SSNs + financial accounts, firms investigating
ABC Supply (2026)
SSNs + driver's licenses per Massachusetts filing — firms investigating
Lone Star Community Health (250K patients)
SSNs + medical data exposed via vendor Aesto Health — firms investigating
Kovack Financial (2026)
Broker-dealer breach — SSNs + financial accounts, nearly a year to notice
Talen Energy (2026)
SSNs + medical record numbers per Massachusetts filing — early stage
Nipro Medical (2026)
SSNs + credit/debit card numbers — firm investigating
Minnesota ENT (2026)
Six hacked email accounts — patient SSNs + medical info, firms investigating
Bahrie Law (2026)
Law-firm client files — SSNs, financial + health records, firm investigating
WilmerHale (Luna Moth wave)
No settlement and no claim form — but free Experian monitoring must be claimed by Oct 31, 2026
Carnival (~6M affected)
April 2026 breach — three class actions filed, no settlement yet
CareCloud (~411K patients)
March 2026 health-record breach — firms investigating
DentaQuest (15M+ affected)
Notice letters out since Jul 17 — no settlement yet, honest tracker
Unlimited Technology Systems
Kroll notice letters out July 2026 — what the letter means, no settlement yet
700Credit ($17.5M — 5.8M affected)
Auto-dealer credit vendor breach — claims closed Sept 22, 2026; approval hearing Oct 7
Doxim ($5.5M — 1.1M affected)
Credit-union statement vendor — postcards out now, file by Oct 13, 2026
McGraw Hill (13.5M emails)
April 2026 ShinyHunters leak — no settlement yet, honest tracker
Comcast Xfinity ($117.5M)
Oct 2023 Citrix breach — approved Aug 2026, claims now closed
LabCorp / AMCA ($35M)
2018–19 billing-vendor breach — claims closed Sep 3, 2026
ZOLL “Heart Device Data” ($3.5M)
LifeVest patients — claims closed Sep 2, 2026, hearing Sep 23
Lakeview Loan Servicing ($26M)
Claims closed Jun 22 — payout status for filers
Lands’ End (employees)
Dec 2024 breach — claims open until Oct 22, 2026
STIIIZY ($2.95M)
Cannabis IDs exposed — claims closed Sep 10, 2026
HCIactive (3M affected)
No settlement yet — honest status tracker
Banner Health ($20/person)
Pixel-tracking settlement — $20 claim deadline Sep 5, 2026
Medtronic (3.8M affected)
No settlement yet — status tracker
Bank of America
IMS/Infosys McCamish breach tracker
Prosper Marketplace
2024 breach — settlement status
Experian Class Actions
All four cases — settled + active
Latest Breach Developments
What actually changed recently — approvals, mailing dates, deadlines, and the cases where nothing has been decided yet.
Kelly Benefits Data Breach Settlement: $5 Million for a Breach Reported at 553,660 People — the $50 Cash Estimate Is Paid Last and Can Drop to Zero, While California Residents Can Add About $100
Telmate Data Breach Settlement: $4.225 Million Across 431,031 People Is $9.80 Each on Paper and $5.30 After Requested Fees and Costs, but Only Those Who File by December 21, 2026 Split It
CPAP Medical Supplies' Data Breach Settlement Says “Up to $5,000” — but There Is No Cash Without Receipts: Documented Losses Only, Capped at $500,000 for 90,133 People. Claims Close November 26, 2026.
A Mortgage Vendor You Never Hired Was Breached: SitusAMC’s $5.3 Million Settlement Covers About 662,796 People — $75 Estimated With No Proof, Up to $5,000 With Receipts, $50 More for Californians. The Fund Works Out to About $8 a Head Before Fees. Claim Deadline November 6, 2026.
IDScan Data Breach: 17 Lawsuits in Four Weeks, Most Now Before One Judge, and No Settlement — IDScan Says an Intruder Was in Its VeriScan Cloud From April 4 to September 2, 2026, but Has Not Said How Many People Are Affected
Inotiv Data Breach Settlement Pays $45 With No Proof and Up to $4,000 for Fraud Losses — With No Fixed Fund to Split: Inotiv Pays Every Approved Claim in Full. Claims Are Due December 2, 2026
How Data Breach Settlements Work
When a company fails to protect your personal data and a breach occurs, affected individuals can seek compensation through a class action lawsuit. If the case settles, the company pays into a settlement fund that is distributed among class members who file valid claims. The amount each person receives depends on the type and sensitivity of data exposed, whether they suffered actual financial harm, and the total number of claims filed.
Data breach settlements have grown significantly in recent years. The Equifax breach resulted in a $700 million settlement, T-Mobile paid $350 million, and Facebook/Meta settled for $725 million. These landmark cases established precedents for how companies are held accountable for data security failures and how compensation is calculated for affected consumers.
Our calculator uses data from dozens of settled class action cases to estimate your potential payout. The key variables are the sensitivity of compromised data (medical records command the highest compensation), whether you experienced actual identity theft, and how the breached company handled disclosure. See our methodology page for details on how we generate estimates.
Average Data Breach Settlement Amounts by Data Type
| Data Type | Typical Range | Notes |
|---|---|---|
| Email / username only | $25 – $100 | Lowest tier; limited harm documented |
| Financial data (cards, bank info) | $100 – $500 | Higher if fraudulent charges occurred |
| Social Security Number | $250 – $1,000 | Requires credit monitoring; high identity theft risk |
| Medical / health records | $500 – $2,500 | HIPAA violations increase settlement value |
| Identity theft occurred | $1,000 – $10,000+ | Documented financial harm significantly increases payout |
Ranges based on analysis of settled class action lawsuits from 2018-2026. Individual results vary based on specific case details and number of claimants.
Major Data Breach Settlements
| Company | Settlement | Affected | Per Person |
|---|---|---|---|
| Equifax (2019) | $700M | 147 million | $125 - $20,000 |
| T-Mobile (2022) | $350M | 76.6 million | $25 - $25,000 |
| Facebook/Meta (2023) | $725M | 87 million | $30 - $5,000 |
| Capital One (2022) | $190M | 100 million | $25 - $25,000 |
| Yahoo (2020) | $117.5M | 3 billion | $25 - $375 |
| Anthem (2018) | $115M | 78.8 million | $50 - $10,000 |
Settlement amounts are approximate and based on publicly available court filings and press reports. Per-person ranges reflect base payments to documented identity theft claims.
Factors That Affect Your Data Breach Payout
- Type of Data Exposed: The sensitivity of your compromised data is the single biggest factor in your payout. Medical records and Social Security numbers command the highest compensation because they create the greatest risk of identity theft and financial harm. Email-only breaches receive minimal payouts because the data has limited exploitability.
- Documented Financial Harm: Claimants who can prove actual financial losses — such as fraudulent charges, costs of credit monitoring, time spent resolving identity theft, or lost income — receive significantly higher payouts. Keep receipts, bank statements, and records of time spent dealing with the breach aftermath.
- Company Response Time: Companies that delayed disclosure or attempted to conceal a breach often face larger settlement funds and higher per-person payouts. Delayed notification gives attackers more time to exploit stolen data, increasing the harm to affected individuals. Most state laws require notification within 30-90 days.
- Scale of the Breach: Larger breaches typically result in bigger settlement funds but more claimants. Paradoxically, smaller breaches with fewer affected individuals sometimes yield higher per-person payouts because the pool of claimants is smaller relative to the fund size.
- Regulatory Environment: Breaches involving HIPAA-protected health data, CCPA-covered California residents, or data from children (COPPA) often result in higher settlements due to additional regulatory penalties and statutory damages. State privacy laws like the Illinois BIPA have led to some of the largest per-person payouts in data privacy history.
How to File a Data Breach Settlement Claim
- Check your eligibility. Confirm that you had an account with the breached company during the class period. Look for notification letters or emails from the company or settlement administrator.
- Gather documentation. Collect evidence of your account, any fraudulent activity, out-of-pocket expenses (credit monitoring, identity theft protection), and time spent resolving issues. Bank statements, police reports, and FTC identity theft reports strengthen your claim.
- File your claim online. Visit the official settlement website listed in your notification. Complete the claim form and upload supporting documentation. Most settlements allow online filing with a deadline 60-180 days after notification.
- Wait for processing. Settlement administrators review claims after the filing deadline. Payouts typically arrive 6-18 months after final court approval, via check, direct deposit, or digital payment depending on the settlement terms.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Frequently Asked Questions
What qualifies as a data breach settlement?
A data breach settlement is a legal resolution of a class action lawsuit filed against a company that failed to adequately protect personal data. When a company experiences a data breach that exposes customer information — such as Social Security numbers, financial data, or medical records — affected individuals can join a class action to seek compensation. Settlements are reached when the company agrees to pay a fund to affected users rather than go to trial.
How much is the average data breach settlement per person?
Average per-person payouts vary widely depending on the type of data exposed and the severity of harm. Email-only breaches typically pay $25-$100, financial data breaches $100-$500, SSN exposures $250-$1,000, and medical record breaches $500-$2,500. If you experienced actual identity theft, payouts can reach $10,000 or more. The Equifax settlement, for example, offered up to $20,000 for documented identity theft victims.
How do I join a data breach class action settlement?
Most data breach settlements require you to file a claim through the official settlement website before the filing deadline. You typically need to provide proof that your data was in the breached system (such as an account with the company during the breach period) and documentation of any losses. The breached company or settlement administrator usually sends notification to affected individuals by email or mail. You can also check sites like classaction.org or the FTC's website for active settlements.
What is the statute of limitations for data breach lawsuits?
The statute of limitations for data breach claims varies by state and legal theory. Most states allow 2-4 years from the date you discovered (or should have discovered) the breach. Some states, such as California under the CCPA, have specific data privacy statutes with their own timelines. Federal class actions may have different deadlines. It's important to act quickly once you learn about a breach, as missing the filing deadline means you cannot participate in the settlement.
Why do data breach settlements pay so little per person?
Data breach settlements divide a fixed fund among all valid claimants. When millions of people are affected, even a $700 million fund (like Equifax) results in modest per-person payments for those without documented losses. The more claims filed, the less each person receives. However, individuals who can document actual financial harm — such as identity theft, fraudulent charges, or time spent resolving issues — typically receive significantly higher payments from a separate tier of the settlement fund.
What recent data breach settlements can I still file claims for?
Active class action settlements change frequently. Major recent settlements include those involving T-Mobile, 23andMe, AT&T, and various healthcare providers. Check the official settlement notice you received, the FTC's refund page (ftc.gov/refunds), or class action tracking websites for current filing deadlines. Many settlements remain open for claims for 60-180 days after the initial notification period.