Data Breach Settlements: What You're Entitled To If Your Data Was Leaked

What you're actually entitled to in a data breach class action settlement. Real payout amounts from current data breach settlements — from no-doc cash to $10,000 for documented losses.

Data Breach Settlements: What You're Entitled To If Your Data Was Leaked

Last updated: July 12, 2026

By now, your personal data has probably been caught up in at least a dozen data breaches.

And by now, you've probably also seen the settlement mailers — the ones that say "Your data may have been compromised in the [Company Name] data breach. You may be entitled to benefits."

What those mailers don't tell you is what you're actually entitled to. Is it $5? $500? $5,000? Free credit monitoring you never use?

Here's the truth about data breach settlement payouts, backed by real settlements currently taking claims.

The Standard Data Breach Settlement: Three Tiers

Almost every data breach settlement follows the same three-tier payout structure:

Tier 1: Cash Without Documentation — $18 to $75

This is the "we know you were affected, here's some cash" tier. You don't need to prove anything beyond your identity. The payout is typically a flat amount set by the settlement.

Current data breach settlements with guaranteed no-doc cash:

The WISP/HelloWisp Privacy Settlement pays a flat $18 per approved claimant, no questions asked. The downside: it closes July 13 — that's tomorrow. If you were a WISP customer, file now.

The FMC Services Data Breach — which involved the exposure of patient records from Family Medicine Centers in Texas — offers the highest no-doc cash payout among current settlements at approximately $75, plus credit monitoring.

Tier 2: Cash With Proof of Out-of-Pocket Losses — Up to $10,000

This tier requires actual documentation (receipts, bank statements, collection notices), but the payouts are much higher. If the data breach led to actual financial harm — and you kept records — you can claim reimbursement.

What counts as a "documented loss"?

Valid documentation typically includes: - Bank fees for replacing cards - Fraudulent charges on your accounts (that the bank didn't refund) - Credit monitoring or identity theft protection you paid for - Costs for freezing/unfreezing credit reports - Fees for notaries, postage, or document retrieval related to the breach - Time spent dealing with the breach (some settlements pay $15–$25/hour for up to 5–10 hours)

Current settlements offering Tier 2 payouts:

Tier 3: Credit Monitoring and Identity Restoration

This is the baseline benefit in nearly every data breach settlement. Even if you don't qualify for cash or don't file a claim for it, class members almost always receive:

• 12–24 months of credit monitoring (often through Experian, Equifax, or a third-party service)
• Identity theft insurance ($25,000–$1,000,000 in coverage)
• Identity restoration services (a case manager to help you undo fraud)

Important: Credit monitoring is worth roughly $10–$20/month if you'd buy it yourself. But most people already have access to free credit monitoring through Credit Karma, their bank, or the free annual credit report. Don't pick a settlement because of the credit monitoring. Pick it for the cash.

What the Data Shows: Average Data Breach Payouts

Based on the data breach settlements currently tracked on The Boring Receipt, here's what you can reasonably expect:

The takeaway: a no-doc cash payout of $50–$75 is the floor, not the ceiling. If you actually incurred costs from the breach, your payout could be 100x higher — but only if you file and submit documentation.

Real Examples: How Much Data Breach Settlements Actually Pay

Case Study 1: Comcast (Xfinity) Data Breach — October 2023 Incident

The breach: In October 2023, Comcast disclosed a breach involving the personal data of millions of Xfinity customers — including names, contact information, and hashed passwords.

The settlement structure: - Tier 1: ~$50 cash, no documentation needed - Tier 2: Up to $10,000 for documented losses - Plus: Identity defense and restoration services

Who qualifies: Xfinity customers whose information was compromised in the breach.

File a claim on the Comcast settlement page →

Case Study 2: FMC Services (Family Medicine Centers) — Patient Data Breach

The breach: FMC Services, which operates Family Medicine Centers, experienced a data security incident that exposed patient personal and protected health information.

The settlement structure: - Tier 1: ~$75 flat cash payment - Tier 2: Up to $5,000 for documented out-of-pocket losses - Plus: 2 years of credit monitoring

Who qualifies: Patients whose information was compromised in the FMC data incident.

File a claim on the FMC settlement page →

Case Study 3: Google Assistant "False Accepts" — Privacy Settlement

The case: Different from a traditional data breach, this settlement covers instances where Google Assistant incorrectly activated and recorded private conversations (called "False Accepts").

The payout: - Device purchasers: $18–$56 per device - Privacy-only class members (recorded but didn't buy a device): $2–$10

Who qualifies: Anyone who owned a Google Home, Nest, or Android device during the class period, or whose conversations were improperly recorded by Google Assistant.

File a claim on the Google settlement page →

Case Study 4: Flo Period Tracker — $59.5 Million Privacy Settlement

The case: Flo Health allegedly shared users' reproductive health data with third-party analytics companies (Google, Flurry) without adequate consent.

The payout: Pro rata share of a $59.5 million settlement fund. Exact amounts depend on how many people file claims.

Who qualifies: Anyone who used the Flo period tracking app during the class period.

File a claim on the Flo settlement page →

Why Data Breach Settlements Payout Less Than You'd Expect

There's a fair question here: If my identity was stolen and I lost thousands, why does the settlement only give me $50?

Here's why:

1. Injury ≠ Fund size. The settlement fund represents what the company agreed to pay to avoid continued litigation — not the total harm caused. For a breach affecting millions of people, the fund might be $5–$15 million. Divided among millions of claimants, that's $50–$75 each.

2. Most people don't have actual losses. For the majority of data breach victims, no identity theft actually occurs. The risk is real, but the actual financial harm is zero for most class members. Flat cash payments compensate for the risk and inconvenience, not proven financial injury.

3. The documented-loss tier exists for a reason. If you genuinely lost money because of the breach — fraudulent charges, credit monitoring costs, time spent freezing accounts — the Tier 2 payout (up to $10,000) is designed to make you whole. It's just that most people don't keep the receipts.

What Data Breach Settlements Include: The Complete List

When evaluating a data breach settlement, look for these benefits:

How to Maximize Your Data Breach Claim

1. File for the no-doc cash immediately

It takes 2 minutes. Do it now before you forget.

2. Search your records for documentation

Go back through your bank statements, email receipts, and credit card records. Look for: - Fees for card replacements - Fraud monitoring subscriptions you paid for - Notary fees, postage costs - Any time you spent dealing with the breach (log it with dates and hours)

3. File for both tiers

Most settlement claim forms let you check a box for "cash payment (no documentation)" AND separately submit a claim for documented losses. Do both. The cash payment is guaranteed; the documented-loss claim is additional.

4. Note deadlines

Data breach settlements often have shorter filing windows than other types of settlements. Check the deadline on each settlement page and file early.

Currently Open Data Breach Settlements

Here are the data breach and privacy settlements still accepting claims:

The Bottom Line

If your data was in a breach: 1. File the claim — Most take under 3 minutes 2. Take the cash — ~$50–$75 for 2 minutes is a $1,500+/hour hourly rate 3. Submit documentation if you have it — You might get 100x more 4. Don't overthink it — The credit monitoring is a bonus, the cash is the point

The Boring Receipt tracks all verified open data breach settlements with real payout amounts and deadlines. Browse all open data breach and privacy settlements.