Data Breach · Claims Open

The Coffee Bean & Tea Leaf Data Breach Settlement — An Estimated $25 or Up to $5,000, Plus $75 for California Residents

Published November 13, 2026

About 53,901 people whose information was potentially affected by The Coffee Bean & Tea Leaf’s April–August 2024 data security incident may qualify to claim an estimated $25 or up to $5,000 in documented losses, plus $75 for California residents, from the International Coffee & Tea data breach class action settlement. Claims close February 10, 2027.

A paper coffee cup on a wooden café table

Current Status

Claims are open. The deadline to file is February 10, 2027, online or by mail postmarked that day. The court granted preliminary approval on September 1, 2026, and the final approval hearing is set for April 15, 2027. No payment date had been announced as of November 13, 2026, and payments will not go out unless the court grants final approval.

Status Claims Open
Claim Deadline February 10, 2027
Estimated Payout Est. $25 or up to $5,000 plus $75 for California residents · one year of CyEx Financial Shield Complete for every class member
Proof Required Yes — ID to file online Login ID and PIN from the notice · no receipts for the $25 or $75 payments · documented losses need receipts

What Changed Recently?

Notices began going out to class members on November 12, 2026, and the claim form opened on the official settlement website. International Coffee & Tea, LLC, which runs The Coffee Bean & Tea Leaf chain of coffee and tea shops, agreed to pay $900,000 into a settlement fund to resolve consolidated lawsuits in Los Angeles County Superior Court. Separately, it agreed to spend $420,000 on data security improvements through the end of 2026 and to keep those measures in place for at least five years.

The lawsuits followed the company’s December 2024 notice of a data security incident. In its letter to affected people, the company said an unauthorized actor gained access to certain systems on June 6, 2024, and to a limited number of email accounts between about April 5 and May 29, 2024 and on August 28 and 29, 2024. The plaintiffs allege the company failed to adequately protect the personal information involved. International Coffee & Tea denies wrongdoing and liability, and the court has not decided who is right.

Who Qualifies?

The settlement class covers the approximately 53,901 people residing in the United States who were potentially affected by the data security incident. According to the settlement documents, the information involved may have included names, Social Security numbers, dates of birth, driver’s license and passport numbers, taxpayer identification numbers, financial account and payment card information, medical and health insurance information, usernames and passwords, and electronic signatures.

The class excludes the judges presiding over the case and their families and staff, International Coffee & Tea and its affiliated entities, and anyone who opts out. A person who received a notice about this settlement is on the class list.

How Much Can You Get?

The settlement offers three kinds of benefits. Claimants choose one of the first two, and California residents can add the third.

Documented losses: reimbursement of up to $5,000 per person for out-of-pocket losses tied to the incident between April 5, 2024 and February 10, 2027, such as identity theft or fraud losses, credit report and credit freeze fees, the cost of replacing identification, and postage. Each expense needs reasonable documentation like receipts or statements; a signed statement alone is not enough. Documented-loss claims that are found deficient and not fixed are converted to the cash payment.

Alternative cash payment: a one-time payment the notice estimates at $25, paid pro rata from what is left of the fund after other payments. The final amount could be higher or lower depending on how many people file.

California resident payment: an additional $75 for class members who lived in California at any point between April 5, 2024 and February 10, 2027. The notice and settlement agreement say this amount may be reduced pro rata.

Every class member also gets one year of CyEx Financial Shield Complete, a monitoring and identity-protection product that includes $1 million in financial fraud insurance, without filing a claim. The enrollment code was printed on the postcard notice.

Before any payments, the $900,000 fund also covers attorneys’ fees of up to $439,956, litigation costs of up to $16,788.24, service awards of $2,500 for each class representative, and up to $75,000 for notice, administration and the credit monitoring, if the court approves those amounts. Money left over after payments may go to a second distribution to claimants who cashed their payments, or to the Electronic Frontier Foundation.

What Proof or Notice ID Is Required?

The online claim form requires the Login ID and PIN printed on the notice. Its login page states that a claimant must sign in with those credentials to start a claim, and someone who cannot find them has to ask the settlement administrator through the official website. A printed claim form can be mailed without the credentials, but filing online is not possible without them.

The $25 cash payment and the $75 California payment do not require receipts; residency is shown by a sworn statement on the claim form. Documented-loss claims require receipts, statements or similar records for each expense.

What Is the Deadline?

Claims must be submitted online by February 10, 2027, or mailed with a postmark no later than February 10, 2027. The settlement documents do not name a time zone. Requests to opt out and objections are due January 11, 2027.

How Do You Take Action?

Claims are filed on the official International Coffee & Tea settlement claim form. The form asks the claimant to log in with the notice’s Login ID and PIN, pick either documented losses or the alternative cash payment, answer the California residency question, and choose a payment method: PayPal, Venmo, Zelle, a virtual prepaid card or a paper check.

Class members who do nothing stay in the class, keep the credit monitoring, receive no cash payment and give up the right to sue International Coffee & Tea over the incident.

What Happens Next?

Judge Carolyn B. Kuhl will hold the final approval hearing on April 15, 2027 at 10:30 a.m. in Department 12 of the Stanley Mosk Courthouse in Los Angeles. Class counsel’s request for fees, costs and service awards is due before the January 11, 2027 objection deadline. Payments depend on final approval and on any appeals being resolved.

Sources and Verification



Questions

Do class members have to file a claim to get the credit monitoring?

No. Every class member is entitled to one year of CyEx Financial Shield Complete, which includes $1 million in financial fraud insurance, whether or not they file a claim. The enrollment code was sent on the postcard notice. A claim form is needed only for the cash payments.

Can a claimant take both the $25 cash payment and documented losses?

No. A claimant chooses either reimbursement of documented losses of up to $5,000 or the alternative cash payment, which is estimated at $25 and paid pro rata. The $75 California resident payment is separate and can be added to either one.

Who counts as a California resident for the $75 payment?

A class member who lived in California at any point between April 5, 2024 and February 10, 2027. A sworn statement on the claim form is enough to show residency. The settlement documents say the $75 may be reduced pro rata if the fund runs short.

What did the lawsuit claim The Coffee Bean & Tea Leaf did wrong?

The plaintiffs allege that International Coffee & Tea, LLC failed to adequately protect personal information exposed in a cyberattack on its computer systems between April and August 2024. The company denies wrongdoing and liability, and the court has not decided whether the claims have merit.

For more class actions keep scrolling below.
Settlement Amount $900,000 plus $420,000 in data security improvements
Case Title Aguilar v. International Coffee & Tea, LLC
Case Number 25STCV00002 (lead case)
Court Superior Court of California, County of Los Angeles
Final Approval Hearing April 15, 2027 at 10:30 a.m. Dept. 12, Stanley Mosk Courthouse
Administrator Simpluris

More Data Breach Settlements With Extra Pay for Californians