Data Breach Settlements: What They Actually Pay (With Real Examples)

Data breaches are the single most common source of class action settlements — and the one people most often ignore. Millions of records get exposed every year; companies settle; the money gets divided among affected people. The problem is that most people never claim their share.

So what does a breach settlement actually pay?

The range is enormous — by design

Every settlement defines 'tiers' of compensation. A typical structure includes a basic payment for everyone whose data was exposed, larger amounts for people who can document specific harm (identity theft, fraudulent charges, lost time), and sometimes extra for state-specific subclasses.

Basic tier payments commonly land anywhere from a few dollars to a few hundred. Documented-harm tiers can run into the thousands.

Real numbers from settlements open right now

Our tracker carries real payout ranges straight from official claim sites. A current example: the Valley Oaks Health data breach settlement pays $40 to $5,500 depending on the tier you qualify for. Another: the CUSO Financial Services settlement pays $100 to $5,699.

Those aren't outliers — they're typical of what structured breach settlements offer. The lesson is that 'my data leaked' can be worth real money, and the only way to know the number is to check the specific settlement.

What you usually need to claim

• Basic tier: often just your name and address — many breach settlements require NO proof of purchase or documentation.
• Documented-harm tier: receipts, bank statements, or other evidence of the harm you suffered.
• A deadline: breach settlements typically run for a limited window — often 6 to 12 months after they open.

Why most breach money goes unclaimed

Because nobody tells you. Notices go out by email — usually to an address you don't check anymore — or they arrive as mailers that look like junk. There's no follow-up. If you miss the deadline, your share is simply redistributed.

A tracker solves the discovery problem: Rightful keeps a running list of open breach settlements with deadlines and eligibility. If you've received a breach notice any time in the last several years — and almost everyone has — it's worth spending five minutes checking what's still open.