Krispy Kreme faces a proposed class-action settlement tied to a November 2024 data breach that the company disclosed in December 2024. The breach involved a cyberattack that potentially exposed sensitive personal information of more than 160,000 people, including current and former employees (and, in related reporting, customers), such as names, dates of birth, and Social Security information, along with financial account details. A preliminary settlement is reported at $1.6 million. Eligible people who received a notice about the incident can submit claims by June 22. According to the settlement terms described across outlets, claimants can choose between taking a set payment—reported as $75—or submitting an itemized claim that may increase the payment up to $3,500, provided they supply supporting documentation such as receipts, emails, or phone records. The notice materials also include offers of identity protection services, including credit monitoring and fraud consultation, though specific coverage terms vary by the claims process. People who want to preserve the option to sue later can opt out before June 6. Those who believe they are affected but did not receive a notice can contact the settlement administrator.