Panera Bread data breach settlement today: How to file a claim, who is eligible, and how much you could receive

tues, nov 11, is the net daytime to give in a claim for the Panera Bread class action lawsuit. Panera Bread has been accused of failing to take sufficient action to prevent a data breach that revealed sensitive information, such as addresses and Social Security numbers.

Plaintiffs in the lawsuit alleged that the company could have prevented the breach if it had implemented stronger cybersecurity protections.

Read More | Google faces hacker ultimatum to fire two employees or risk data leak

People who are eligible to file a claim should have received a notification from the settlement administrators by now, according to the Austin American-Statesman. Here’s a look at how to claim a file, how much the settlement payout could be and who is eligible.

The process of filing a claim and the maximum compensation amounts are based on which data breach a customer was affected by. You can find an elaborate breakdown on the settlement website.

The settlement terms say that people who experienced what administrators classify as extraordinary losses may get up to $6,500 in compensation. Members of the same subclass can also seek reimbursement for the time spent investigating their losses, and the compensation for that is capped at $2,500. This is calculated at $25 per hour for up to 10 hours.

Read More | Gmail passwords part of massive data leak; 183 million users affected

People who incurred ordinary losses may claim up to $500, which will cover expenses like credit monitoring services or credit report fees. In all these instances, the claimants are required to provide proof of loss, such as a receipt, bank statement, or similar documentation.

You can use this link to submit a claim.

While the deadline is November 11, 2025, the payment schedule is going to be announced after the Final Fairness Hearing. The hearing is scheduled on January 29, 2026, at 10:30 am.

The first data breach took place on March 30, 2024, affecting about 73 million accounts — 7.6 million current customers and 65.4 million former ones. The leaked information, which was found is a dark web dataset, included addresses, Social Security numbers, birth dates, passcodes, billing numbers, and phone numbers.

The second data breach was announced on July 12, 2024, after hackers were accused of downloading the data from a third-party cloud platform. The incident included records of calls and texts, and "nearly all" cellular customers were involved.

"Based on our investigation, the compromised data includes files containing AT&T records of calls and texts of nearly all of AT&T's cellular customers, customers of mobile virtual network operators using AT&T's wireless network, as well as AT&T's landline customers who interacted with those cellular numbers between May 1, 2022 - October 31, 2022," the company said in the news release at the time.

AT&T further confirmed that the hacked data did not "contain the content of calls or texts, personal information such as Social Security numbers, dates of birth, or other personally identifiable information."

The breaches triggered several state and federal lawsuits. The suits were grouped into two class-action cases.

---

---