Circle K data breach class action settlement

Gas Express LLC — which does business as Circle K — has agreed to a class action settlement to resolve claims arising from a targeted cyberattack on its computer systems that occurred in May 2024.

The Circle K class action settlement benefits all individuals residing in the United States who were sent a notice by Circle K that their private information was impacted in the data incident.

According to the class action lawsuit, certain files containing private information — including names and Social Security numbers — were accessed during the May 2024 cyberattack on Circle K’s systems. As a result, affected individuals were allegedly exposed to risks of identity theft and financial fraud.

Circle K is a convenience store and gas station chain operating across the United States.

Circle K has not admitted any wrongdoing in this class action settlement but agreed to pay an undisclosed amount to resolve the data breach class action lawsuit.

Under the terms of the Circle K settlement, class members can receive one of two cash payments. Class members with documented out-of-pocket losses caused by the data incident may claim up to $2,000 in reimbursement for expenses, such as identity theft losses, credit monitoring fees and costs to replace identification documents.

Alternatively, class members without documented losses may claim a one-time $50 cash payment without providing proof or explanation.

All class members can additionally receive two years of CyEx Financial Shield Complete credit monitoring, which includes $1 million in financial fraud insurance and monitoring for identity theft, unauthorized financial transactions and personal information associated with high-risk transactions.

The deadline for exclusion and objection is Sept. 3, 2026.

The final approval hearing for the Circle K settlement is scheduled for Sept. 18, 2026.

To receive settlement benefits, class members must submit a valid claim form by Sept. 3, 2026.