Lawsuit Update Center
Data breaches have become one of the most common ways personal information is exposed. Social Security numbers, medical records, financial account information, driver’s license numbers, dates of birth, login credentials, and health insurance information are all stored electronically by companies that consumers often have no real choice but to trust.
When that information is stolen or exposed, the fallout can be more than an inconvenience. Victims may face identity theft, fraudulent accounts, tax problems, medical identity theft, credit damage, and hours spent trying to clean up a mess they did not create.
Data breach class action settlements usually do not make victims whole. Many settlements offer credit monitoring, identity theft protection, reimbursement for documented losses, and sometimes a smaller cash payment for people who do not have receipts. But the size of the settlement fund and the proof requirements can make a big difference in what people actually receive.
July 2026 Data Breach Settlement Updates
- Flagstar Bank: Flagstar has a $31.5 million data breach settlement with a claim deadline of August 11, 2026. Eligible class members may claim documented monetary losses up to $25,000, a residual cash payment, three years of credit monitoring, and an additional statutory payment for eligible California residents.
- GeoLogics Corporation: The GeoLogics data incident settlement has a claim deadline of August 17, 2026. Settlement class members may claim two years of credit monitoring, documented out-of-pocket losses up to $2,500, or an estimated $50 alternative cash payment.
- Gas Express / Circle K: The Gas Express data incident settlement, involving certain Circle K locations, has a claim deadline of September 3, 2026. Eligible class members may claim two years of monitoring, documented losses up to $2,000, or a $50 alternate cash payment.
- Lighthouse Electric: The Lighthouse Electric data incident settlement has a claim deadline of September 14, 2026. The settlement involves an October 2024 data incident that may have exposed names, Social Security numbers, financial account information, and health insurance information.
- DATS: The DATS data breach settlement has a claim deadline of September 24, 2026. Class members need the unique Class Member ID and PIN from their notice to submit an online claim.
- Bray International: The Bray International data incident settlement is still barely open as of late July 2026, with a claim deadline of July 30, 2026. This is a short window, so anyone with a notice should act quickly.
Active Data Breach Settlements at a Glance
This chart focuses on data breach settlements with open claim windows as of late July 2026. Claim deadlines and eligibility rules can change, so consumers should rely on the official settlement website and their class notice before submitting a claim.
| Settlement | Claim Deadline | Possible Benefits | Who May Qualify | Status |
|---|---|---|---|---|
| Flagstar Bank | August 11, 2026 | Up to $25,000 for documented losses, residual cash payment, three years of credit monitoring, and possible California statutory payment. | People identified by Flagstar as impacted by the 2021 data breaches. | Open claim window. |
| GeoLogics Corporation | August 17, 2026 | Two years of credit monitoring, up to $2,500 for documented losses, or an estimated $50 alternative cash payment. | U.S. residents whose private information was potentially compromised in the December 2023 GeoLogics cyberattack. | Open claim window. |
| Gas Express / Circle K | September 3, 2026 | Two years of monitoring, up to $2,000 for documented losses, or a $50 alternate cash payment. | U.S. residents sent notice by Gas Express that their private information was impacted in the May 2024 data incident. | Open claim window. |
| Lighthouse Electric | September 14, 2026 | Settlement benefits available to class members who submit valid claims. Review the official notice for the specific benefit options. | People who received notice that Lighthouse Electric records show they are class members. | Open claim window. |
| DATS | September 24, 2026 | Settlement benefits available through the official claim form. A Class Member ID and PIN are needed for online filing. | People who received notice of the DATS data breach settlement. | Open claim window. |
| Bray International | July 30, 2026 | Settlement benefits available to class members who submit valid claims by the deadline. | People whose private information was potentially impacted in the April 2024 Bray International data incident. | Still open, but deadline is almost here. |
Flagstar Bank Data Breach Settlement
Flagstar Bank has one of the most significant currently active data breach settlements. The settlement resolves claims tied to two 2021 data breaches that impacted more than two million people in the United States.
Eligible class members who submit valid claims may seek reimbursement for documented monetary losses up to $25,000. The settlement also offers a residual cash payment, estimated at about $60 but capped at $599, three years of credit monitoring, and an additional payment of up to $100 for eligible California residents.
The claim deadline is August 11, 2026. Consumers who received notice should review the official settlement website and submit documentation if they are claiming monetary losses. Receipts, bank records, credit monitoring charges, fraud-related expenses, and credit-freeze costs may help support a claim.
GeoLogics Corporation Data Breach Settlement
The GeoLogics Corporation data breach settlement covers U.S. residents whose private information was potentially compromised in a December 2023 cyberattack on GeoLogics computer systems.
Class members may claim two years of credit monitoring services, which include $1 million of identity theft protection insurance. They may also claim documented out-of-pocket losses up to $2,500, or choose an estimated $50 alternative cash payment without proof.
The claim deadline is August 17, 2026. This is a good example of the standard structure in many data breach settlements: documented losses get a higher cap, while people without receipts may be offered a smaller fixed or estimated cash payment.
Gas Express / Circle K Data Breach Settlement
The Gas Express data incident settlement involves Gas Express, LLC, doing business as Circle K. The settlement covers people in the United States who were notified that their private information was affected in a May 2024 data incident.
Settlement class members may claim two years of CyEx Financial Shield Complete, which includes monitoring and $1 million of financial fraud insurance. They may also claim documented losses of up to $2,000 or choose a $50 alternative cash payment without proof.
The claim deadline is September 3, 2026. The same date is also the opt-out and objection deadline, with a final approval hearing scheduled for September 18, 2026.
Lighthouse Electric Data Incident Settlement
The Lighthouse Electric settlement involves an October 2024 data incident affecting files that may have contained names, Social Security numbers, financial account information, and health insurance information.
The settlement website says that if you received notice from the administrator, Lighthouse Electric’s records indicate that you may be a class member. The claim deadline is September 14, 2026. The opt-out and objection deadline is August 14, 2026, and the final approval hearing is scheduled for October 29, 2026.
People who received notice should review the official claim form carefully. Data breach settlements often require different proof depending on whether you are claiming documented losses, credit monitoring, or another available benefit.
DATS Data Breach Settlement
The DATS data breach settlement has an open claim deadline of September 24, 2026. The official settlement website says class members need their unique Class Member ID and PIN from the settlement notice to complete the online claim form.
If you believe you are a class member but do not have your notice, the settlement website directs people to contact the settlement administrator. As with most data breach settlements, it is important to use the official settlement website rather than a third-party site that may have outdated or incomplete information.
Bray International Data Incident Settlement
The Bray International data incident settlement is still open as of late July 2026, but only barely. The claim deadline is July 30, 2026. The case involves an April 2024 data incident that may have exposed names, Social Security numbers, and driver’s license numbers.
Anyone who received notice and wants to file a claim should move quickly. By the time many consumers reach settlement pages online, the claim deadline may already be approaching or have expired. This is one reason data breach victims should open and save any settlement notice they receive by mail or email.
What Proof Helps in a Data Breach Settlement?
Most data breach settlements divide benefits into two categories: claims with documentation and claims without documentation. The best payouts usually require proof that the breach caused out-of-pocket losses.
| Proof | Examples | Why It Helps |
|---|---|---|
| Financial loss records | Bank statements, credit card statements, fraud reports, unreimbursed charges, overdraft fees. | Higher-tier settlement benefits usually require documented losses. |
| Identity theft expenses | Credit monitoring bills, credit freeze costs, replacement ID costs, postage, notary fees. | These are commonly reimbursable when tied to the data incident. |
| Time spent | A log of time spent calling banks, replacing cards, filing reports, or dealing with fraudulent accounts. | Some settlements reimburse lost time, but many impose hourly or total caps. |
| Settlement notice | Postcard notice, email notice, class member ID, PIN, claim code. | Many official claim forms require the ID and PIN from the notice. |
What Do Data Breach Lawsuits Typically Look Like?
Data breach lawsuits usually start after a company, hospital, financial institution, employer, or vendor discloses that personal information was accessed by an unauthorized actor. The plaintiff alleges that the defendant failed to use reasonable cybersecurity measures, delayed notice, or collected sensitive information without properly protecting it.
These cases are often filed as class actions because the same incident can affect thousands or millions of people. The claims usually focus on negligence, breach of contract, unjust enrichment, state privacy laws, consumer protection statutes, or duties imposed on healthcare or financial entities.
Common Legal Theories in Data Breach Lawsuits
- Negligence: Plaintiffs argue the company failed to take reasonable steps to protect sensitive information.
- Breach of contract: Plaintiffs may point to privacy policies, service agreements, or other promises that personal information would be protected.
- Statutory violations: Depending on the industry and state, claims may involve privacy, consumer protection, healthcare, or financial privacy laws.
- Unjust enrichment: Plaintiffs may argue the company benefited from collecting data while failing to spend enough to secure it.
Why Many Data Breach Settlements Feel Small
Data breach settlements can look large in the headline but feel disappointing to the people affected. A $30 million settlement may be spread across millions of class members, attorneys’ fees, administration costs, credit monitoring, service awards, and documented loss claims. That is why many people receive credit monitoring or a modest cash payment unless they can prove actual losses.
That does not mean these settlements are meaningless. They can reimburse real losses, provide monitoring, and force companies to improve cybersecurity. But victims should understand that the highest advertised payout is usually reserved for people with strong documentation of financial harm connected to the breach.
What Should You Do If You Receive a Data Breach Settlement Notice?
- Do not ignore the notice. It may contain your claim ID, PIN, deadline, and settlement website.
- Use the official settlement website. Avoid random third-party pages that may be outdated or unreliable.
- Save proof of losses. Keep receipts, statements, fraud reports, and credit monitoring costs.
- Compare benefit options. Some settlements require you to choose between documented losses and a smaller cash payment.
- File before the deadline. Late claims are usually rejected, even if you were clearly affected.
Bottom Line
As of late July 2026, several data breach settlements still have active deadlines. Flagstar, GeoLogics, Gas Express/Circle K, Lighthouse Electric, DATS, and Bray International are the main active settlements listed on this page.
If you received a notice for one of these settlements, review the official settlement website, gather your documentation, and file before the deadline. If you did not receive notice, you may still be able to contact the settlement administrator to ask whether you are in the class.
