← All guides
2026-05-12 · data-breach · payout · expectations

What a Data Breach Settlement Actually Pays Out (Realistic 2026 Numbers)

Notices quote big numbers. Final per-claimant payouts are smaller. Here are the actual ranges and what drives them.

Headlines say "$350 million settlement" and class members ask "so I get $1,000?" Almost never. Per-claimant payouts in data breach settlements are typically 1 to 5% of the headline number divided by the breach size.

The math, with actual recent numbers.

What the headline number includes

The total fund pays for everything: cash to class members, attorney fees (usually 25-33% of the fund), administrator costs, credit monitoring services, notice costs, and a residual reserve. After all those, roughly 50-60% of the fund is available for cash distribution.

What drives per-claimant payouts

Three variables: breach size (more affected people, lower per share), claim rate (filing rates run 5-20% of eligible class), and tier mix (more documented losses means more goes to the high tier).

T-Mobile 2021 ($350 million, 76 million affected): $25 baseline cash, up to $25,000 for documented losses. Actual payouts settled around $18-$22 baseline once filing rate was finalized.

Equifax 2017 ($425 million minimum, 147 million affected): Initial estimates of $125 per person were not met. Actual cash payouts averaged under $40 because filing rates were higher than projected. Free credit monitoring was the bigger benefit.

Capital One 2019 ($190 million, 100 million affected): $25 baseline plus documented losses. Average actual cash was $20-$25 for baseline filers, $200-$800 for documented claims.

AT&T 2024 ($177 million, ~73 million affected): Expected baseline $50-$150, documented loss tier up to $5,000. Final amounts not yet distributed as of 2026-05-18.

Why credit monitoring matters more than cash

The cash portion of data breach settlements is roughly $0.40-$2.00 per affected person in actual money received. The included free credit monitoring is worth $100-$300 at retail. If the settlement offers monitoring, sign up even if you have it elsewhere. Free coverage stacks.

When the payout is actually material

Three scenarios produce larger checks:

First, smaller breaches with higher per-claimant tiers: a 500,000-person breach with a $50 million fund pays significantly more per person than a 76 million-person breach with a $350 million fund.

Second, documented identity theft or fraud: receipts and bank statements pushing your claim to the high tier can multiply the payout by 10-50x.

Third, opt-out plus individual litigation: if you have documented harm well above the class average, opting out and filing in small claims or state court can recover full damages.

What this means for filing strategy

File baseline claims for all settlements you qualify for. The friction is low, the cash is small but real, and the credit monitoring is the actual benefit. Save documentation for higher-tier claims if you have it. Skip individual litigation unless your documented loss is over $1,000 or you have a specific scenario (medical identity theft, mortgage fraud from a stolen identity) that the class fund will not cover.

Settlements mentioned