Krispy Kreme’s data breach settlement is entering its final stretch, and eligible victims have only weeks left to claim cash payments tied to the 2024 cyberattack.

The $1.6 million class-action settlement stems from a November 2024 data breach that exposed sensitive information belonging to more than 161,000 current and former employees. The compromised information allegedly included names, dates of birth, Social Security numbers, biometric data, and financial account details.

While Krispy Kreme denies wrongdoing or liability, the company agreed to settle the lawsuit to avoid prolonged litigation.

Who qualifies for the settlement

According to the official settlement website, eligible class members are US residents who received notice that their personal information “may have been impacted in the Data Incident.”

The settlement FAQs page says the lawsuit was filed after an incident “discovered on November 29, 2024,” involving “the unauthorized access to or acquisition of Settlement Class Members’ Private…