Published
September 30, 2026
Data breach class action settlements most often advertise up to $5,000 per person, but that figure caps reimbursement for documented losses. Across 305 data breach settlements tracked by Open Class Actions, the cash available without receipts had a median of $50.
Open Class Actions keeps a page for every data breach settlement it tracks, and each page records the same details from the settlement notice and claim form: the cash tiers, the documented-loss cap, the total fund, what information was exposed, whether filing requires the ID printed on the notice, and the claim deadline. As of September 30, 2026, that is 305 data breach settlements, published between August 2022 and this week. This analysis reads all of them.
The short version: the advertised figure and the typical payment are different benefits, and the gap between them is about 70 to 1. The methodology and its limits are at the end.
1. The Headline Number Is a Reimbursement Cap, and It Is Usually $5,000
Of the 284 settlements that stated a per-person maximum, the median was $5,000, and 119 of them (41.9%) set it at exactly $5,000. The next most common figures were $2,500 (26 settlements), $10,000 (14) and $4,000 (14). Only 22 settlements (7.7%) advertised $10,000 or more.In 238 of those 284 settlements, the headline figure was the cap on reimbursement for documented out-of-pocket losses: fraudulent charges that were not reversed, credit freeze or report fees, professional fees, and similar costs a claimant can prove with receipts, bank statements or other records. A class member with no documented losses is not eligible for that amount at all. The cap is also a ceiling, not a formula: a claimant who documents $300 in losses is reimbursed up to $300.
2. The Cash Payment Without Receipts Clusters at $50
Most data breach settlements also offer a payment that requires no documentation, usually called an alternative cash payment, a flat payment or a pro rata cash payment. In most of them it is an alternative to the documented-loss option rather than an add-on, though some settlements let a claimant take both. Of the 305 settlements, 185 stated a dollar figure for that payment, either a fixed amount or the administrator's estimate. Across those 185:• Median: $50
• $50 or less: 102 settlements (55.1%)
• $100 or less: 178 settlements (96.2%)
• Most common amounts: $50 (59 settlements), $100 (31), $75 (23), $45 (13), $40 (12)
Another 51 settlements offered a pro rata cash payment without stating any estimate, and 39 offered no no-documentation cash option at all, only documented-loss reimbursement and monitoring. For those 39, a class member with no receipts could claim monitoring and nothing else.
Estimates are not promises. A fixed "$50 payment" is paid as stated if the fund covers it; an "estimated $50 pro rata payment" is a projection based on an assumed number of claims, and the final amount moves with the number of people who actually file. Across the 185 settlements, 93 stated a fixed amount (median $50) and 92 stated an estimate (median $67.50).
3. The Gap Between the Two Is About 70 to 1
For 177 settlements the pages stated both a documented-loss cap and a no-documentation cash figure. The median documented-loss cap among them was $5,000, the median no-documentation payment was $50, and the median ratio between the two within the same settlement was about 70 to 1.Two currently open settlements show the pattern in its most common form. The Lands' End data breach settlement and the Palomar Health data breach settlement each offer an estimated $60 in cash or up to $5,000 in documented losses. Both numbers are accurate. Only one of them describes what a typical class member will receive.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
4. The Type of Data Exposed Barely Changes the Check
People whose Social Security numbers were taken reasonably expect a larger settlement than people whose email addresses were. In the no-documentation cash payment, the tracked settlements do not bear that out:• Social Security numbers exposed: median $50 across 116 settlements (average $63.60)
• Medical or health information exposed: median $50 across 91 settlements (average $63.80)
• Financial account or payment card numbers exposed: median $50 across 66 settlements (average $63.00)
The median advertised maximum was also $5,000 in all three groups. Healthcare-sector settlements, the largest group at 115 of 305, came in slightly higher at a median of $57.50 across 70 settlements that stated a figure, against $50 for all other sectors.
What the exposed data does change is the rest of the benefit package. Settlements involving medical records often substitute medical identity monitoring for credit monitoring, and some pay a separate or higher amount to a subclass whose Social Security numbers were involved. The broader steps after a Social Security number breach are covered in what to do when a Social Security number is exposed, and the medical-record version in medical identity theft after a data breach.
5. A Bigger Fund Does Not Mean a Bigger Check
The 178 settlements that stated a total fund had a median fund of about $2.1 million. 61 of them (34.3%) were under $1 million, 136 (76.4%) were under $5 million, and 8 reached $50 million or more.Size of fund did not translate into size of payment. Among the 92 settlements that stated both a total fund and a no-documentation cash figure, the median payment was $75 for funds under $1 million (34 settlements), $75 for funds between $1 million and $5 million (40), and $75 for funds of $5 million or more (18). A larger fund generally reflects a larger class, so the per-person share lands in the same range.
The number that moves an individual payment most is the claims rate. Most no-documentation payments are paid under pro rata distribution: what is left of a fixed fund after documented losses, attorneys' fees and administration costs is split among everyone who filed. The notice in the Regal Medical Group data breach settlement, a fund of about $50 million, projected the pro rata payment at about $358 if 2% of the class filed, about $172 at 4%, and about $115 at 6%. Tripling participation cut each payment by roughly two thirds.
6. Most Claims Need the ID Printed on the Notice
Of the 215 settlements with a clear filing requirement:• Administrator-issued identifier required to file online: 183 settlements (85.1%). This is a Class Member ID, Notice ID, Claim ID, or Login ID and PIN printed on the mailed or emailed notice.
• No identifier and no documents needed for the cash tier: 20 settlements (9.3%)
• Documents only: 8 settlements (3.7%)
• Paid automatically, with no claim form: 4 settlements (1.9%)
The class in a data breach case is a fixed list of people the company notified, so the administrator gates the claim form on the code it sent them. Of the 84 tracked data breach settlements with a claim deadline still ahead on September 30, 2026, 79 required that identifier. In 47 of the 183 ID-gated settlements, the page noted that a paper claim form could still be submitted without the code, which is the usual route for someone who never got the notice or threw it away. The distinction between "no receipts needed" and "no proof needed" is covered in no-proof versus proof-required claims.
7. Monitoring Is Nearly Universal, and California Residents Often Get More
Of the 254 settlements whose pages addressed it, 241 (94.9%) offered credit monitoring, identity protection or medical data monitoring. Monitoring is usually available on top of whichever cash option a claimant chooses, and it frequently has to be selected on the claim form rather than being added automatically.At least 26 settlements paid California residents an extra or higher amount, usually $50 to $100, tied to California's data breach statutes. In some it was an add-on; in others the California amount replaced the standard payment, as in the estimated $25 standard and $100 California payments in the T-Mobile data breach settlement.
8. The Window Is Short Once a Settlement Surfaces
For 261 settlements, the date Open Class Actions first published the settlement could be compared against the claim deadline. The median gap was 56 days. 91 settlements (34.9%) had 30 days or less remaining, and 58 (22.2%) had two weeks or less. Almost all, 95.0%, had 90 days or less.That gap is not the administrator's full claim period, which begins when notices go out. It approximates how much time a reader has once a settlement is findable online, and it is shorter for data breach settlements than the 55-day median across all tracked settlements reported in the broader settlement payout study, where this category was not broken out. After the deadline, payment typically takes months more; the steps are covered in how long it takes to get a settlement check.
What the Numbers Mean for Someone Holding a Breach Notice
• Expect the no-receipt option to pay around $50. 96% of stated amounts were $100 or less.• Treat the documented-loss option as reimbursement. It pays only what records support, up to the cap. Anyone with unreimbursed fraud losses, freeze fees or paid professional help should gather the records before filing.
• Keep the notice. 85% of settlements required its ID to file online.
• Select monitoring if it is offered. It is often a separate box on the claim form, and it is available in 95% of settlements that addressed it.
• Verify before clicking. Breach settlements attract fake notices; how to tell whether a settlement email is real covers the checks.
Open data breach settlements, with current deadlines, are listed on the data breach class actions hub, and the legal background is in the data breach class action glossary entry.
Methodology and Limits
The dataset is every data breach and data security incident settlement page published on OpenClassActions.com as of September 30, 2026: 313 candidate pages, of which 305 describe a settlement with a benefits or claims process. Eight were excluded: investigations and pending lawsuits with no settlement, a regulatory resolution with no consumer claims, a website-tracking privacy case, and an explainer duplicating another page. Each page's figures are compiled from primary sources: official settlement websites, court-approved notices, claim forms, settlement agreements and court orders.Sub-counts differ by finding because not every page states every field. A per-person maximum was stated on 284 pages, a no-documentation cash figure on 185, a total fund on 178, a clear filing requirement on 215, a monitoring determination on 254, and both a publication date and a claim deadline on 261. Percentages are calculated against the relevant subgroup, not all 305. Three Canadian settlements whose amounts are in Canadian dollars were left out of every dollar figure.
Five limits are worth stating plainly:
• This is a census of Open Class Actions coverage, not a sample of all U.S. data breach settlements. It covers settlements with a public claims process, and leans toward the smaller healthcare, financial and employer breaches that make up most of that process.
• Every figure is what the settlement documents state, not what was paid. Final per-person amounts after distribution were reported on only three pages, too few to analyze. Estimated pro rata payments can end up higher or lower than the estimate.
• The documented-loss cap is recorded as the page states it. Where a settlement has separate ordinary and extraordinary loss caps, pages differ in whether they report the higher cap or the combined total, so the advertised maximum is used for the headline finding.
• Where a settlement offered different cash amounts to different groups, the base amount was used, and state-subclass amounts were counted separately.
• The 56-day figure measures coverage timing, not the administrator's claim period.
Frequently Asked Questions
How much does a data breach settlement pay per person?
For most class members, about $50. Across 185 data breach settlements tracked by Open Class Actions that stated a no-documentation cash amount, the median was $50 and 96 percent of those amounts were $100 or less. The larger figures in settlement headlines, most often up to $5,000, are caps on reimbursement for documented out-of-pocket losses, which require receipts or statements.
What does "up to $5,000" mean in a data breach settlement?
It is the maximum a single class member can be reimbursed for losses they can document, such as fraudulent charges, credit freeze fees or professional fees, with records. It is not a payment everyone receives. Of 284 tracked data breach settlements that stated a per-person maximum, 119 set it at exactly $5,000, the most common figure by far.
Does a data breach involving Social Security numbers pay more?
Not in the no-documentation cash payment. Among tracked settlements that stated a no-documentation amount, the median was $50 where Social Security numbers were exposed (116 settlements), $50 where medical information was exposed (91), and $50 where financial account or card numbers were exposed (66). The type of data exposed can matter more for which benefits are offered, such as medical identity monitoring, than for the size of the cash payment.
Do I need the notice ID to file a data breach settlement claim?
Usually. Of 215 tracked data breach settlements with a clear filing requirement, 183 (85 percent) required an administrator-issued identifier from the mailed or emailed notice, such as a Class Member ID, Notice ID, or Login ID and PIN, to file online. About a quarter of those said a paper claim form could be submitted without the identifier. Someone who lost the notice can request the identifier through the contact page on the official settlement website.
Why was my data breach settlement check smaller than advertised?
Most no-documentation cash payments are paid pro rata: whatever remains in a fixed fund after documented losses, fees and costs is split among everyone who filed. The more people who file, the smaller each share. In one tracked case, the notice estimated the pro rata payment at about $358 if 2 percent of the class filed, about $172 at 4 percent, and about $115 at 6 percent.
Do bigger data breach settlements pay more per person?
Not reliably. Among 92 tracked settlements that stated both a total fund and a no-documentation cash amount, the median payment was $75 for funds under $1 million, $75 for funds of $1 million to $5 million, and $75 for funds of $5 million or more. Larger funds usually cover larger classes, so the per-person share stays in a similar range.
Sources
• Open Class Actions settlement archive — 305 data breach settlement pages analyzed September 30, 2026, compiled from official settlement websites, court-approved notices, claim forms, settlement agreements and court orders• Federal Rules of Civil Procedure, Rule 23 — Current Rules of Practice & Procedure
• Federal Trade Commission — IdentityTheft.gov recovery steps
About This Page
OpenClassActions.com is an independent consumer news and information site. It is not a law firm and not a settlement administrator. This analysis describes our own tracked data breach settlement inventory and is general information, not legal advice. Figures are as recorded on our settlement pages as of September 30, 2026 and reflect what settlement documents state, not amounts confirmed as received by class members. Researchers and journalists are welcome to cite these findings with attribution.
For more class actions keep scrolling below.
