People sent notice that their information may have been compromised in the October 2024 STIIIZY data security incident could claim up to $7,500 in documented losses, or a pro rata cash payment, plus two years of credit monitoring. Claims closed September 10, 2026, and the court entered final judgment approving the settlement on October 26, 2026; no payment date has been announced.
What Is This Settlement About?
STIIIZY, Inc. — the California-based cannabis vape and retail brand — has agreed to a $2,950,000 class action settlement to resolve claims arising from a data security incident that the company says occurred in October 2024 and disclosed to customers in January 2025. According to the complaint, an unauthorized third party accessed personal information held on STIIIZY's systems, allegedly through a vendor used for point-of-sale processing. The information involved may have included names, addresses, dates of birth, driver's license numbers, photos, signatures, and transaction histories.The lawsuit, consolidated as In Re: STIIIZY Inc. Data Breach Security Litigation in the U.S. District Court for the Central District of California, alleges STIIIZY failed to adequately protect customer data. STIIIZY denies the allegations and any wrongdoing; the settlement resolves the claims without any admission of liability. The court granted preliminary approval in May 2026, the claim deadline passed on September 10, 2026, and Judge George H. Wu entered final judgment approving the settlement on October 26, 2026.
Who Qualifies?
The settlement class is made up of individuals who were sent notice that their personal information may have been compromised in the October 2024 STIIIZY data security incident. STIIIZY's investigation indicated the incident affected roughly 380,000 customers. If you received an email notice or a mailed notice about the breach, you are almost certainly a class member.People who did not receive a notice but have a reasonable basis to believe their information was affected may still submit a claim, subject to the claims administrator's verification. This is a settlement of a privacy and data-security investigation that began as an earlier-stage matter — you can read our original STIIIZY data breach investigation for background on how the incident first came to light.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
How Much Can You Get?
Class members could choose between two cash options, and could also add credit monitoring:- Documented losses: reimbursement of up to $7,500 per person for out-of-pocket expenses and losses fairly traceable to the breach — for example unreimbursed fraud charges, bank fees, credit-monitoring costs you already paid, and similar documented expenses. This option requires supporting documentation.
- Pro rata cash payment: a flat cash payment that requires no out-of-pocket documentation. The exact amount depends on how many valid claims are filed against the $2.95 million fund after fees, costs, and any service awards, so it cannot be stated in advance.
- Credit monitoring: all class members may also elect two years of credit monitoring, fraud consultation, and identity theft restoration services, including three-bureau credit monitoring and up to $1 million in identity theft insurance.
Claimants generally had to choose between the documented-loss option and the pro rata cash option; the two cash benefits could not both be collected.
How Claims Were Filed
Claims were submitted online at StiiizyDataBreachSettlement.com or on a paper claim form mailed to the claims administrator, by September 10, 2026. Filing online generally required the Class Member ID printed on the email or mailed notice, and documented-loss claims also required supporting records such as receipts, statements, or invoices.Important Deadlines
- Claim deadline: September 10, 2026 (submitted online or postmarked) — passed.
- Exclusion / objection deadline: August 26, 2026 — passed.
- Final approval: the hearing was held October 19, 2026, and final judgment approving the settlement was entered October 26, 2026. Payments are issued only after the settlement becomes final, including the end of any appeal period.
What changed recently: on October 26, 2026, Judge George H. Wu entered a judgment finally certifying the nationwide settlement class and a California subclass for settlement purposes and approving the settlement, according to the court docket. That followed the October 19 hearing and plaintiffs' motion for final approval filed September 17, 2026. No payment date had been announced as of October 28, 2026; payments go out after the time for any appeal has run.
Frequently Asked Questions
Who qualifies for the STIIIZY data breach settlement?
The settlement class includes individuals who were sent notice that their personal information may have been compromised in the October 2024 STIIIZY data security incident. People who did not receive a notice but believed they were affected could also submit a claim, subject to the administrator's verification. The claim deadline passed on September 10, 2026.
How much does the STIIIZY settlement pay?
Class members could claim reimbursement of up to $7,500 for documented out-of-pocket losses, or instead elect a pro rata cash payment that required no documentation. The pro rata amount depends on the number of valid claims filed against the $2.95 million fund. Class members could also elect two years of credit monitoring, fraud consultation, and identity theft restoration services with up to $1 million in identity theft insurance.
Did filing a STIIIZY claim require proof?
Yes. Filing online generally required the Class Member ID printed on the settlement notice. The documented-loss option also required supporting records such as receipts, bank statements, or invoices. The pro rata cash option needed no out-of-pocket documentation, but the claim was still tied to the notice and Class Member ID.
What was the deadline to file a STIIIZY claim?
Claim forms had to be submitted online or postmarked by September 10, 2026, and that deadline has passed. The deadline to opt out of or object to the settlement was August 26, 2026. Judge George H. Wu entered final judgment approving the settlement on October 26, 2026. No payment date had been announced as of October 28, 2026.
