Panda Restaurant Group Inc., the parent company of Panda Express, agreed to pay $2.45 million to settle a class action lawsuit over a data breach that exposed personal information of approximately 240,000 current and former employees. If you received a notice in the mail, here’s what you need to know to file your claim.
What happened
In or around March 2023, Panda Restaurant Group suffered a data breach that compromised employee information. The company did not publicly disclose when it happened or what data was collected, but the settlement covers current and former employees whose information was made public.
The problem with data breaches is that companies collect your data, don’t protect it, and then act surprised when it’s stolen. Panda denies any wrongdoing in the settlement agreement, but will still pay $2.45 million. That tells you everything you need to know.
$100Estimated fixed payment
April 10Claim deadline
What you can claim
The settlement offers two options:
Option 1: Documented Losses (up to $5,000)
If the data breach caused you actual expenses, you can claim up to $5,000. This includes things like:
- Fraudulent charges that have not been refunded
- Bank fees for dealing with identity theft
- Credit monitoring services you purchased
- Professional costs (lawyer, accountant)
- Loss of wages due to time spent resolving fraud
- Other documented costs directly related to the breach
You will need receipts, bank statements or other proof of these expenses.
Option 2: Fixed Cash Payment (approximately $100)
If you have no documented losses but have been affected by the breach, you can claim a lump sum cash payment. The exact amount depends on how many people file claims, but is estimated at around $100.
Free credit monitoring for everyone
All class members automatically receive one year of three-bureau credit monitoring plus $1 million in identity theft insurance. You don’t have to file a claim to get this; it doesn’t matter whether you take the cash or not.
How to make your claim
You will need two things from your settlement statement: your unique ID and your PIN. Without this you cannot submit online.
- Go to www.claimdepot.com/settlements/prg-breach-settlement
- Enter your unique ID and PIN from the notification you received in the mail
- Choose Option 1 (documented losses) or Option 2 (fixed payment)
- If you are claiming documented losses, please upload proof of the costs
- Submit your claim before April 10, 2026
If you have not received a notice but believe you should be included in the settlement, please call 1-866-302-7373 or email info@PRGBreachSettlement.com.
Why this matters
Data breaches are the new normal. Companies collect vast amounts of personal information, store it on servers they promise are secure, and then react in shock when hackers break in. The settlements are always a fraction of the actual damage.
If your identity is stolen, you not only lose money, but also time. Hours on the phone with banks. Freeze credit reports for hours. Hours of disputing charges. Hours that you will never get back. The $100 flat payment doesn’t come close to covering it, but it’s better than nothing.
What happens next
After you submit your claim, the settlement administrator will review it. If you have claimed documented losses, they will verify your expenses. Once all claims have been processed, payments will be distributed.
The timeline depends on how many people apply and whether anyone objects to the settlement. Expect several months before you see a check.
Protect yourself in the future
One year of free credit monitoring is nice, but not enough. When that year is over, you’ll be on your own. This is what you need to do:
- Freeze Your Credit Reports at All Three Bureaus (It’s Free)
- Set up fraud alerts on your bank accounts
- Check your credit reports regularly (you are entitled to free reports from each bureau once a year)
- Use strong, unique passwords for each account
- Never reuse passwords on different sites
Data leaks don’t go away. Companies have no real incentive to protect your information because if they fail, they simply pay a settlement and move on. The only person who is going to protect your data is you.
When you’re dealing with debt on top of identity theft or fraud, it’s a double crisis. Check out Find Your Path to understand all your options, not just the ones someone benefits from selling you.
In short
Parent company Panda Express will pay $2.45 million for a data breach that affected 240,000 employees. If you have received a notice, please submit your claim by April 10, 2026. Take advantage of the free credit monitoring, freeze your credit reports and stay vigilant. Data breaches are the new normal: protect yourself accordingly.
Frequently asked questions
Who is eligible for the Panda Express data breach scheme?
Current and former Panda Restaurant Group employees whose personal information was compromised in the March 2023 data breach. If you received a settlement notice in the mail with a unique ID and PIN, you are eligible to file a claim.
How much can I get from the Panda Express settlement?
Up to $5,000 if you have documented, unreimbursed losses from the breach (such as fraudulent charges, bank charges, or credit monitoring charges). If you don’t have receipts, you can claim a cash payment of approximately $100. All class members also receive one year of free credit monitoring from three agencies and $1 million in identity theft insurance.
When is the deadline for filing a claim?
April 10, 2026. If you miss this deadline, you will lose your right to claim any cash payments from the settlement.
What should I do if I have not received a settlement notice?
Contact the Settlement Administrator at 1-866-302-7373 or email info@PRGBreachSettlement.com to confirm class membership and request claim information.
Should I accept the settlement?
No. If you wish to sue Panda Restaurant Group on your own, you can exclude yourself from the settlement. But realistically, $5,000 is probably more than you would get back in an individual lawsuit after paying attorney fees. Most people are better off taking the settlement.
Sources: The mirror, ClaimDepot Settlement Portal, Top class actions
#Panda #Express #data #breach #settlement #claim #April