“Return to Kroll, P.O. Box 980108” Is a Real Address — but It Is Not a Settlement Check. DentaQuest’s Own Unfilled Mail Template Explains Why Those Three Words Reach Customers of Companies With Nothing in Common

An envelope arrives with no company name on the outside. Where the sender should be, three words: “Return to Kroll”, then P.O. Box 980108, West Sacramento, CA 95798. Nothing about a lawsuit, nothing about money.

The address is real, and it is possible to verify it without opening anything. The Educational Employees Credit Union notice dated May 29, 2026 — filed with the California Attorney General and mirrored by ClassAction.org — carries exactly that block at the top of the page: the credit union’s name, then “Return to Kroll / P.O. Box 980108 / West Sacramento, CA 95798”.

What follows it is headed “NOTICE OF DATA BREACH”. In that particular case the credit union learned on December 15, 2025 that an unauthorised individual had reached one employee email account, and determined on May 8, 2026 that those emails held personal information. The letter offers two years of complimentary Kroll identity monitoring — credit monitoring, fraud consultation and identity theft restoration — activated at enroll.krollmonitoring.com with a membership number printed in the letter, before a stated deadline.

That is the whole content. There is no cheque, no claim form, and no amount of money. If you were expecting a payout, this is not it — but if you ignore it, you lose free monitoring that someone else is paying for, and it expires.

The reason the same phrase turns up on mail from a credit union, a dental benefits administrator and a healthcare technology vendor is mundane, and there is a published artefact that shows it.

The DentaQuest data breach notice letter, as published by ClassAction.org, was released with its mail-merge placeholders still unfilled. The first three lines of the document read, literally:

<<Return to Kroll>>
<<Return Address>>
<<City, State ZIP>>

In other words, “Return to Kroll” is not a message about your case. It is a field in the template Kroll uses for breach-notification mailings, printed the same way for every client that hires it. That is why searching the phrase turns up dozens of unrelated companies at once, and why no single answer on the internet seems to match the letter in your hand.

The confusion that follows is predictable, because Kroll does two separate jobs that both involve mailing strangers.

• Kroll Monitoring is the identity-protection service a breached company buys immediately after an incident. That is the West Sacramento envelope. Reference information sits at info.krollmonitoring.com; enrolment at enroll.krollmonitoring.com. Free, time-limited, nothing to claim.
• Kroll Settlement Administration LLC is the court-appointed administrator that runs a class-action settlement years later, if a lawsuit is filed and resolved. Its notices name a court case and number, point to a case-specific settlement website, and usually carry a Class Member ID. Its settlement mail uses case-specific New York P.O. boxes, not the West Sacramento one.

The practical consequence: a monitoring offer is not evidence that a settlement exists, and the arrival of one does not put you in line for a payment. Equally, having ignored a monitoring letter two years ago does not disqualify you from a settlement later — administrators work from the defendant’s own records, not from who replied.

Four checks settle it quickly. (1) Read the letterhead, not the envelope — the company that was breached is named inside, and that is the case you should be searching for. (2) If it offers monitoring, note the activation deadline; it is the only thing in the letter that expires. (3) Type the enrolment domain yourself rather than following a link from an email. (4) Nothing legitimate here costs money: no court-appointed administrator and no breach-notification programme ever asks a recipient for a fee, a gift card, or a bank login. A request for any of those is fraud, and can be reported at ReportFraud.ftc.gov.

One more thing worth knowing: an unexpected cheque is a different situation from an unexpected letter. Counterfeit settlement cheques circulate. If one arrives, call the case hotline printed on the official settlement website — found by typing the domain yourself — before depositing it.

This article exists because the question is being asked at a volume that nothing on the open web currently answers well. Over the seven days to August 26, 2026, Google Search Console recorded 232 distinct Kroll-related queries reaching Settlement Insight, totalling 3,164 impressions and 63 clicks — a click-through rate of 1.99% at an average position of 6.4.

The largest single phrasings were “return to kroll” (521 impressions), “return to kroll mail” (331), “unlimited return to kroll” (242) and “unlimited kroll” (225). The recurring word “unlimited” points at the Unlimited Systems breach notices, which we track separately.

The pattern in that list is worth stating plainly: people are typing the words printed on an envelope, because the envelope does not tell them who sent it or why. That is a failure of the notice design, not of the reader.