Active Data Breach Settlements 2026: How to File and Get Paid

Why 2026 Is a Record Year for Breach Settlements

Data breaches became a near-weekly news cycle starting around 2017, with major incidents at Equifax, Target, Yahoo, and Marriott. The litigation pipeline takes 3 to 6 years to mature, which means the major breaches of 2020 to 2023 are now reaching settlement stage in 2025 and 2026.

The result: more open data breach class action settlements than at any point in U.S. history. The IBM Cost of a Data Breach Report 2025 estimated the average corporate breach costs \$4.45 million in damages and fines. Plaintiffs' attorneys have responded by aggressively pursuing class actions, and most defendants settle rather than litigate at trial.

If you've received a notification letter saying "your information may have been involved in a security incident," there's a meaningful chance there's a settlement open or coming. Most pay between \$25 and \$250 in the flat-rate tier with no proof required.

Currently Active Data Breach Settlements (May 2026)

Comcast / Xfinity Data Breach ($117.5M)

Deadline: August 14, 2026 · File at comcastbreachsettlement.com

A 2023 cyberattack exposed personal data of 31.6 million Xfinity customers. The settlement provides a flat ~\$50 payment for all class members, plus up to \$10,000 for documented identity theft or fraud losses. No proof required for the flat tier — you just confirm you were a Xfinity customer during the period.

Norton Healthcare Data Breach ($11M)

Deadline: May 18, 2026 · File at nortondataincidentsettlement.com

The May 2023 attack on Norton Healthcare exposed SSNs and medical records of 2.5 million patients. Up to \$80 flat payment per person, plus reimbursement for documented out-of-pocket losses up to \$5,000. Filing takes about 5 minutes.

PharMerica Pharmacy Breach (Closed but reopened cases exist)

The 2023 ransomware attack on PharMerica exposed SSNs and prescription data of millions. While the original settlement closed in April 2026, related smaller class actions are still active. Check pmcsettlement.com for status.

McLaren Health Care Breach ($14M)

Ransomware attacks in 2023-2024 exposed 2.8 million patients' data. Original deadline closed but secondary claims are being processed. Up to ~\$5,000 with documentation.

Other Active Healthcare Breaches

The healthcare sector has seen dozens of class action settlements in 2026. Major ones with current or recent deadlines:

• Gryphon Healthcare ($2.8M)
• Numotion ($5M+)
• Continuum Health ($1M+)
• NextGen Healthcare ($31M)
• Concentra Health Services (multiple cases)

If you received a breach notice from a hospital, clinic, pharmacy, or medical billing service in the last 3 years, search the company name plus "class action settlement" to find active claims.

How to Know If You're Affected by a Breach

Three signals you may be eligible to claim:

1. You received a notification letter. Companies are required by state law to notify affected consumers in writing or by email when their data is exposed. If you received one, save it — it's typically required when you file.
2. You were a customer or patient during the affected period. Each settlement defines a class window. If your service usage overlaps with that window, you likely qualify even without a notice letter.
3. Your information appeared in a public breach database. Sites like haveibeenpwned.com tell you which breaches have exposed your email address. Cross-reference matches with active class action settlements.

Getting Cash While You Wait on Settlements

How to File a Data Breach Claim (Step by Step)

1. Visit the official settlement website. Listed on every breach notification letter. Make sure it's the official .com or .net the court approved — not a third-party site charging fees.
2. Determine your tier. Most settlements offer a flat-rate tier (\$25 to \$250, no proof needed) and an enhanced tier with documented losses (\$1,000 to \$25,000).
3. Fill out the claim form. You'll need name, address, last four of SSN, and confirmation you were a customer or patient during the affected window.
4. Submit by the deadline. Claim windows are typically 6 to 12 months from settlement approval. Miss the deadline and you forfeit your share.
5. Wait. Payments typically arrive 3 to 12 months after the deadline closes.

No-Proof vs. Documented-Loss Tiers

Almost every data breach settlement has two payout structures:

Flat tier (no proof needed)

You confirm you were a customer during the affected period. The settlement pays a flat amount per claimant — usually \$25 to \$250. This is the right path for 90%+ of claimants. It takes 5 minutes to file.

Enhanced tier (proof of damages)

You provide documentation of actual losses tied to the breach: unauthorized charges, identity theft expenses, time spent freezing credit, credit monitoring fees, lost wages from disputing fraud. The settlement pays up to \$5,000 to \$25,000 depending on the case.

If you have any documented losses, file the enhanced tier — the difference in payout is typically 10x to 100x the flat tier. The downside is the documentation requirement (receipts, fraud affidavits, etc.).

Tasks That Pay More Than the Settlement

Avoiding Data Breach Settlement Scams

The data breach settlement space attracts scams. Red flags:

• Charging a fee to "file" your claim. Every official settlement is free to claim. If a service charges, they're skimming.
• Asking for full SSN over email or phone unsolicited. Official claim forms only ask for the last 4 of your SSN.
• Domains that look-alike. If the URL is "comcast-breach-settlement.org" instead of "comcastbreachsettlement.com," it's likely fake. The court-approved domain is always linked in the official notification letter.
• "You're owed \$50,000 from a class action you didn't file" calls. Scam. You can't claim a settlement you didn't file for.

Frequently Asked Questions