CR&R Data Breach Settlement
Last verified July 12, 2026Source: claimdepotHow ClaimWatch verifies cases
This settlement is closed to new claims — the deadline was August 24, 2026. You can still see what it was about and follow the case in court below. Looking for money you can still claim? Browse open settlements →
What happened
CR&R Incorporated experienced a targeted cyberattack on its computer systems on or about December 13, 2022, in which certain files containing private information were accessed. These files may have contained personal information including names, Social Security numbers, financial account information, and health insurance information. CR&R denies wrongdoing.
Do you qualify?
Anyone who received a notice about the December 2022 CR&R Data Breach.
What you can claim
Read from the official settlement notice. Confirm the terms that apply to you on the administrator's site before filing.
Credit Monitoring Services
All Settlement Class members may enroll in two years of credit monitoring by the three credit bureaus at no cost.
Documented Losses Reimbursement
$5,000 eachClass members who incurred actual, documented out-of-pocket losses due to the Data Incident can be reimbursed up to $5,000.00 for losses occurring between December 13, 2022, and August 24, 2026. Proof such as bank statements or receipts is required.
Alternate Cash Payment
$150 eachClass members may claim a one-time cash payment instead of documented losses reimbursement, expected to be approximately $150.00, with no proof or explanation required.
Who is in the class
All living individuals residing in the United States who were sent a notice of the Data Incident indicating their Private Information may have been impacted in the Data Incident.
Quoted from the settlement notice.
How to file
Submit a valid and timely Claim Form by the August 24, 2026 deadline. You can submit the form online at the settlement website or download it and mail it to the Settlement Administrator.
Common questions
- How much does the CR&R Data Breach Settlement pay?
- The total settlement fund is $500,000. Actual amounts depend on how many valid claims are filed — most settlements divide a fixed fund pro rata, so a higher claim rate means a smaller individual check. An "up to" figure is a cap, not a guarantee.
- What is the claim deadline for the CR&R Data Breach Settlement?
- This settlement is closed to new claims — the deadline was August 24, 2026. Once a claim deadline passes you generally forfeit your share, even if you qualified.
- Do I need proof of purchase for the CR&R Data Breach Settlement?
- No. You can file without a receipt or proof of purchase. You attest that you qualify and submit basic details, though claims are still subject to review and submitting a false claim is a crime.
- Is the CR&R Data Breach Settlement notice real, or a scam?
- Simpluris is the settlement administrator for this case. Claims are filed at crrdatasettlement.com. Filing a class action claim is always free — no legitimate settlement charges you to claim, and no administrator will ask for payment, a gift card, or your full Social Security number by email or text. If a notice asks for any of those, it is not from the administrator. When in doubt, ignore the link you were sent and go to the official settlement website directly.
- When will payments from the CR&R Data Breach Settlement be sent?
- Class action payouts typically take 12 to 24 months after the claim deadline, and longer if the settlement is appealed. The final approval hearing for this case is set for September 14, 2026; no payments can be issued before a settlement receives final approval.
New to class actions?
This summary was generated from public settlement documents and may contain errors. Confirm eligibility, deadlines, and payment terms on the official settlement website before filing. ClaimWatch is not a law firm and this is not legal advice. Filing a claim is free.
More data breach settlements
View all →Period Tracker Data Privacy Settlement (Flo, Google, Flurry)
Between November 2016 and February 2019, the Flo period and ovulation tracker app allegedly incorporated code from third-party software development kits (from Flurry, Meta, and Google) through which user information related to menstruation and pregnancy was allegedly shared without proper legal authorization. Google agreed to pay $48 million, Flo agreed to pay $8 million, and Flurry agreed to pay $3.5 million to settle. All defendants deny wrongdoing and assert they did nothing wrong.
…moreNot stated
Lands' End Data Breach Settlement
Lands' End experienced a data security incident in December 2024 that compromised certain files containing personal information of class members, including names, dates of birth, Social Security numbers, driver's license and passport information, and in some cases medical information. Lands' End denies wrongdoing, but has agreed to settle the lawsuit to avoid costs and risks of continued litigation.
…moreAmerican Vision Partners Data Breach Settlement
American Vision Partners suffered a cyberattack discovered in November 2023 that compromised personal information of approximately 1.6 million U.S. residents, including Social Security numbers for about 258,070 people. Plaintiffs allege personal information was compromised; the defendant denies this allegation.
…morePro-rata cash payments or out-of-pocket expense claims for Damages Settlement Class Members
Wayne Memorial Hospital Data Breach Settlement
Wayne Memorial Hospital had a data incident discovered on or around June 3, 2024, in which certain files may have been accessed without authorization between approximately May 30 and June 3, 2024. The hospital notified potentially impacted individuals on or around August 27, 2025. The lawsuit alleges the hospital was negligent in failing to prevent the data incident. The hospital denies all allegations.
…more