“A data breach at a donut company sounds almost funny — until you realize they had your Social Security number, your bank account, and your health records. That’s not a donut problem. That’s an identity theft problem.”
If you worked at Krispy Kreme at any point before November 2024 — in a shop, in a warehouse, in an office — your most sensitive personal information may have been stolen by a ransomware gang. And right now, there’s a $1.6 million settlement sitting there that will pay you real money if you file a simple form before June 22.
I’m writing this because settlements like this come and go quietly. The company sends a postcard. Most people throw it away. The deadline passes. And the people who were actually harmed get nothing.
If your employer is the one that lost your data, the rules are the same: another example is the Gas Express / Circle K employee data breach settlement, open now.
Claiming money you are owed is one good day. What you do over the following year is what actually changes your position.
In the latest issue (Oct 8): A parent's nursing home bill can become yours
I write Your Money Actually most weekdays — actionable money information you will not find anywhere else, and the small decisions that compound. It is free, I sell nothing, and I take no money from any company I write about.
Let’s make sure that doesn’t happen here.
What Happened — and Why It Matters More Than You Think
On November 29, 2024, Krispy Kreme discovered that hackers had broken into their network systems. The attack was later claimed by the Play ransomware gang — a criminal group known for stealing data and threatening to publish it unless the company pays.
Approximately 161,000 current and former employees had their data exposed. And this wasn’t just names and email addresses. This was everything:
They also got driver’s licenses, passport numbers, biometric data, and login credentials. This is the kind of breach that doesn’t just risk a fraudulent charge on your card — it risks someone opening new accounts, filing tax returns, or taking out loans in your name for years to come.
The Settlement: $75 With No Paperwork, or Up to $3,500
Krispy Kreme agreed to a $1,616,760 class action settlement. Here’s what you can claim:
Option A: No-Documentation Payment
- Flat $75 payment — no receipts, no proof needed
- Just fill out the form and submit
- Final amount may adjust based on total claims filed
- Takes less than 5 minutes
Option B: Documented Losses
- Up to $3,500 for fraud or identity theft losses
- Requires documentation (receipts, bank statements, police reports)
- Covers out-of-pocket costs tied to the breach
- Upload files up to 20MB each (PDF, JPG, DOC, XLS)
Even if you never noticed any fraud, take the $75. That’s real money for 5 minutes of your time. And if you did notice strange charges, unfamiliar accounts, or had to spend time dealing with identity theft after November 2024 — document it and file for the full amount.
Deadline: June 22, 2026. After this date, you cannot file a claim. Mailed forms must be postmarked by June 22. The court will hold the final approval hearing on July 6, 2026.
How to File Your Claim — Step by Step
Step 1: Check If You Got the Notice
Krispy Kreme mailed postcards to affected employees with a Unique ID and PIN. Check your mail — including old addresses if you’ve moved since working there. If you didn’t get one but believe you’re eligible, contact the Settlement Administrator at 1-877-239-1879 or email info@KrispyKremeDataSettlement.com.
Step 2: Go to the Settlement Website
Visit KrispyKremeDataSettlement.com and click “Submit a Claim.” Enter your Unique ID and PIN from the postcard.
Step 3: Choose Your Option
- Option A — $75, no documentation. Choose this if you had no known fraud but want your share of the settlement.
- Option B — Up to $3,500. Choose this if you have receipts, statements, or records showing costs from identity theft or fraud after November 2024.
Step 4: Submit
Fill in your information, upload any documentation if claiming Option B, and submit. You’ll receive a confirmation email with a confirmation code. Save that email.
Prefer paper? You can also mail your claim to: Krispy Kreme Data Incident Settlement Administrator, PO Box 2047, Portland, OR 97208-2047. Must be postmarked by June 22, 2026.
The Move You Should Make Right Now — Even If You Don’t File
Here’s what most data breach coverage won’t tell you: the $75 is the easy part. The harder — and more important — move is checking whether someone already used your stolen data.
When a breach exposes Social Security numbers and dates of birth together, identity thieves don’t always act immediately. They may sit on the data for months, even years, then open accounts when you’re not watching.
Do this today:
- Pull all three credit reports at AnnualCreditReport.com — it’s free, and you can check weekly. Look for accounts you don’t recognize, addresses you’ve never lived at, and inquiries you didn’t make.
- Freeze your credit at all three bureaus if you haven’t already: Equifax (1-800-349-9960), Experian (1-888-397-3742), TransUnion (1-888-909-8872). A freeze is free and prevents anyone from opening new accounts in your name.
- Check your bank statements for unfamiliar charges — especially small test charges under $5, which thieves use to verify a stolen card works.
- File an IRS Identity Protection PIN at IRS.gov/Get-An-IP-PIN — this prevents someone from filing a fraudulent tax return using your SSN.
Also currently open: the Labcorp $35 million data breach settlement (deadline September 3, 2026) — this one involves medical identity theft risk that can quietly damage your credit report.
Why credit freezes matter more than monitoring: The settlement includes one year of free credit monitoring, and that’s fine — take it. But monitoring only tells you after something happens. A credit freeze prevents it from happening. Monitoring is a smoke detector. A freeze is a firewall. You want both, but the freeze is the one that actually stops the damage.
If You Find Something Wrong on Your Credit Report
If you pull your reports and find accounts you didn’t open or charges you didn’t make, here’s the path:
- File an identity theft report at IdentityTheft.gov — this creates a recovery plan and generates the affidavits you need
- Dispute the fraudulent accounts with all three credit bureaus in writing — the FTC report gives you leverage
- File a police report — some creditors require one before removing fraudulent accounts
- Upgrade your Krispy Kreme claim to Option B — your identity theft documentation now supports a claim up to $3,500 instead of $75
This is exactly why I’m telling you to check your credit reports before the June 22 deadline — if you find fraud, you have time to document it and file the larger claim.
Other Data Breach Settlements Open Right Now
If you’re checking one settlement, check them all. Several major data breach settlements are currently accepting claims:
- Comcast — $117.5 million settlement, filing deadline September 14, 2026
- Fidelity — up to $5,000 per claimant, filing deadline July 27, 2026
- Two more settlements totaling $13.7 million opened in May 2026
Data breaches are now so common that the average American has had their information exposed multiple times. Check each one — five minutes per form could mean hundreds of dollars you’re owed.
Key Takeaway
If you worked at Krispy Kreme before November 2024, you may be one of 161,000 people eligible for $75 (no documentation) or up to $3,500 (with documentation) from their data breach settlement. File at KrispyKremeDataSettlement.com before June 22, 2026. But don’t stop there — pull your credit reports at AnnualCreditReport.com this week, freeze your credit at all three bureaus, and file an IRS Identity Protection PIN. The settlement money is a start. Protecting yourself going forward is the real move.
This is what I’m seeing after 30 years of helping people with money problems. A data breach at a donut company feels small until you realize they had your Social Security number. Take the money. Protect your identity. And send this to anyone who worked at Krispy Kreme — they probably threw the postcard away. Take my advice as input, not instruction. Only you know your full situation.
Also currently open: the Labcorp $35 million data breach settlement (deadline September 3, 2026) — this one involves medical identity theft risk that can quietly damage your credit report.
Dealing With Debt? Understanding your options is the first step. See how all your debt relief options compare — including ones most sites won’t tell you about. The Find Your Path quiz gives a recommendation based on your actual numbers, and the Scam-O-Meter checks any company’s complaint history before you sign. Federal Reserve research shows bankruptcy filers recover faster than those who don’t file.
Also currently open: the Labcorp $35 million data breach settlement (deadline September 3, 2026) — this one involves medical identity theft risk that can quietly damage your credit report.
