Kroll Class Action Lawsuit: Full 2026 Status Guide

Never Miss a Lawsuit Update

Mark Lawfold as a Preferred Source so you never miss a settlement deadline or new filing.

The Kroll class action lawsuit stems from a devastating August 2023 data breach that exposed personal information belonging to hundreds of thousands of people. If you had claims in the FTX, BlockFi, or Genesis bankruptcy cases, your data was likely compromised.

A SIM-swapping attack on a Kroll employee’s phone gave hackers direct access to sensitive files. Names, addresses, Social Security numbers, and financial account details were all at risk.

This guide covers everything you need to know heading into 2026. You’ll find settlement details, payout estimates, eligibility requirements, filing steps, and current deadlines.

You might also find this useful — Clinique Advertising Dispute Model Lawsuit 2026 Updates

Over 700,000 individuals may have been affected by this single breach. That makes it one of the largest data exposures tied to a bankruptcy services firm in U.S. history.

What Is the Kroll Class Action Lawsuit?

The Kroll class action lawsuit is a legal action brought by individuals whose personal data was exposed during a cybersecurity breach at Kroll LLC in August 2023. Plaintiffs allege that Kroll failed to protect sensitive information it was entrusted to safeguard.

Kroll serves as a claims administrator for major bankruptcy proceedings. The company held personal data for hundreds of thousands of creditors in high-profile crypto bankruptcies.

When a hacker used a SIM-swapping technique to compromise a Kroll employee’s T-Mobile phone account, they gained access to files containing names, addresses, dates of birth, Social Security numbers, and financial details.

The lawsuit argues that Kroll was negligent. Specifically, plaintiffs claim the company didn’t use adequate multi-factor authentication or cybersecurity protocols to prevent unauthorized access.

This case hits differently than most data breach lawsuits. Kroll is the company that other companies hire to manage sensitive legal data. The irony of a data security firm losing control of personal information is central to the plaintiffs’ argument.

Kroll Data Breach Lawsuit Explained

The Kroll data breach lawsuit centers on the company’s failure to implement basic cybersecurity safeguards. Plaintiffs say a single SIM-swap attack should never have been enough to unlock access to sensitive creditor files.

Here’s how the breach unfolded. A threat actor convinced T-Mobile to transfer a Kroll employee’s phone number to a new SIM card. With that phone number, the hacker bypassed SMS-based two-factor authentication.

Once inside, the attacker accessed Kroll’s systems and downloaded files related to active bankruptcy cases. The breach wasn’t discovered immediately, giving the hacker time to extract large volumes of data.

• Kroll relied on SMS-based authentication, which security experts consider weak
• The attacker targeted a single employee with high-level system access
• Files from at least three major bankruptcy cases were compromised
• Kroll did not detect the intrusion in real time

Multiple lawsuits were filed in the weeks following the breach disclosure. Several of these have been consolidated or are moving through federal court as of 2026.

The core legal theory is straightforward: Kroll had a duty to protect the data it held, it knew about SIM-swapping risks, and it chose not to invest in stronger security measures. That negligence, plaintiffs argue, caused real harm.

Kroll Data Breach Settlement: What We Know

The Kroll data breach settlement is still being negotiated as of early 2026. No final settlement has been approved by the court, but there are strong signals that resolution could come within the year.

Settlement discussions have been ongoing since late 2024. Both sides have exchanged discovery materials, and a court-appointed mediator has been involved in talks.

Based on similar data breach class actions, legal analysts project the total settlement fund could range between $10 million and $50 million. The wide range reflects uncertainty about how many victims will file claims.

Settlements in data breach cases typically include two components. First, cash payments to class members who can show they suffered actual harm. Second, extended credit monitoring services for everyone in the class.

If you’ve experienced identity theft or financial fraud since August 2023, keep records of everything. Documented losses will likely lead to higher individual payouts when the settlement is finalized.

Key Takeaway: The Kroll data breach settlement remains in active negotiation, with a potential total fund of $10M to $50M and possible payouts beginning in late 2026.

Kroll Class Action Settlement Amount Breakdown

The Kroll class action settlement amount will depend on the total fund size, the number of valid claims filed, and the tier of damages each claimant can prove. No final number has been confirmed as of 2026.

In comparable data breach cases, settlement amounts have varied widely. The Equifax breach settlement offered up to $425 per person for basic claims. The T-Mobile breach settlement provided around $25 to $100 per claimant.

Given the sensitivity of the data involved here (Social Security numbers, financial records), legal experts expect the Kroll settlement to land on the higher end of typical payouts.

There’s an important pattern in data breach settlements. The people who document everything tend to receive significantly more than those who file a bare-minimum claim.

Save receipts for any credit monitoring you purchased. Keep records of time spent freezing credit reports, dealing with banks, or filing fraud reports. All of this strengthens your claim.

Kroll Settlement Payout Per Person

The Kroll settlement payout per person is projected to fall between $50 and $5,000, depending on the level of harm you can document. Most claimants without direct fraud evidence will likely receive between $50 and $300.

This range is consistent with recent large-scale data breach settlements. The reality of class action payouts is that they rarely make anyone wealthy. Think of it more like compensation for the headache, not a windfall.

For those who suffered actual identity theft tied to the Kroll breach, payouts could be substantially higher. Some data breach settlements have awarded individuals over $10,000 when they proved significant out-of-pocket losses.

• No documented harm: $50 to $150 estimated
• Some protective action taken: $150 to $500 estimated
• Identity theft or financial fraud: $500 to $5,000+ estimated
• Severe cases with extensive proof: Potential for individual settlements above class payout

The number of people who actually file claims matters enormously. If 100,000 people file on a $30 million fund, the average payout is $300. If 300,000 file, it drops to $100.

Historically, only about 5% to 15% of eligible class members bother filing claims. That’s good news for those who do file; less competition means a bigger share of the pot.

Who Is Affected by the Kroll Data Breach?

If you were a creditor in the FTX, BlockFi, or Genesis bankruptcy proceedings as of August 2023, you were likely affected by the Kroll data breach. These three cases represent the largest groups of victims.

Kroll served as the official claims agent for all three bankruptcies. That means the company held personal data submitted by hundreds of thousands of individuals who filed proofs of claim.

The specific data exposed varied by individual but generally included:

• Full legal names
• Home and mailing addresses
• Dates of birth
• Social Security numbers or tax ID numbers
• Financial account information
• Cryptocurrency holdings and claim amounts

Not everyone in these bankruptcies was necessarily exposed. But the breach was broad enough that Kroll sent notification letters to a very large percentage of creditors.

If you filed a proof of claim in any of these cases and provided personal information through Kroll’s portal, you should assume your data was compromised until you receive confirmation otherwise.

Key Takeaway: FTX, BlockFi, and Genesis creditors who submitted personal data through Kroll’s claims portal are the primary victims of this breach, totaling an estimated 700,000+ people.

Kroll Class Action Lawsuit Eligibility Requirements

Kroll class action lawsuit eligibility generally requires that your personal information was part of the data accessed during the August 2023 breach. You don’t need to prove you suffered identity theft to be eligible; you just need to show your data was exposed.

The eligibility criteria are expected to include:

• You were a creditor in the FTX, BlockFi, or Genesis bankruptcy cases
• You submitted personal information through Kroll’s claims management system
• Your data was among the files accessed during the breach
• You received a data breach notification letter from Kroll

You do not need a lawyer to participate in the class action. Class members are automatically included unless they choose to opt out.

If you want to pursue your own individual lawsuit instead, opting out of the class is an option. But for most people, staying in the class action is the simpler and more practical path.

One thing to watch: the final settlement agreement may define eligibility more narrowly. Keep your breach notification letter. It’s your proof that Kroll identified you as an affected person.

How to File a Kroll Data Breach Claim

Filing a Kroll data breach claim will involve submitting a claim form through the official settlement website once the court approves the settlement. As of early 2026, that site is not yet live, but the process is expected to follow standard class action procedures.

Here’s what the filing process will likely look like:

1. Receive notice: Class members get an email or letter about the settlement
2. Visit the settlement site: A dedicated website will host the claim form
3. Complete the form: Enter your personal details and select your claim tier
4. Upload documentation: Provide proof of losses if claiming higher damages
5. Submit before the deadline: Claims must be filed before the cutoff date

Start gathering your documents now. If you spent money on credit monitoring, froze your credit, or dealt with suspicious activity on your accounts, collect those records.

The easier you make it for the claims administrator to verify your losses, the faster and larger your payout will be. Think of your claim like a tax return: the better your records, the better your outcome.

Kroll Class Action Lawsuit Deadline in 2026

The Kroll class action lawsuit deadline in 2026 has not been officially set because the settlement has not yet received final court approval. However, based on the litigation timeline, a claims filing deadline in mid to late 2026 is the most likely scenario.

Once the court grants preliminary approval of the settlement, a specific claims deadline will be announced. Class members typically get 60 to 120 days to file after notification goes out.

Missing the deadline means forfeiting your right to a payout. This happens in every class action, and it’s one of the biggest reasons people lose out on money they’re owed.

Set a reminder right now. When you receive the settlement notice, act immediately. Don’t let it sit in a pile of mail or get buried in your inbox.

Also worth exploring: NFL Lawsuit Kelly and Sons 2026: Settlement and Payouts

Key Takeaway: While no firm deadline exists yet, the claims window is expected to open and close in 2026, so staying alert for your settlement notice is essential.

Kroll Data Breach 2023 Lawsuit Update

The Kroll data breach 2023 lawsuit has progressed significantly since the initial filings. As of 2026, the case has moved through discovery and into settlement negotiations.

Here’s a timeline of major events:

• August 19, 2023: Kroll discovers the SIM-swap breach
• August 25, 2023: Kroll begins notifying affected individuals
• September 2023: First lawsuits filed in federal court
• Late 2023: Multiple cases consolidated in the Southern District of New York
• 2024: Discovery phase begins; both sides exchange evidence
• Early 2025: Mediation sessions commence
• Late 2025: Settlement framework discussions intensify
• 2026: Settlement negotiations continue toward possible resolution

The plaintiffs’ legal team has been building a strong record during discovery. Internal Kroll documents reportedly show that employees raised concerns about SIM-swap vulnerabilities before the breach occurred.

If those documents prove that Kroll knew about the risk and didn’t act, it significantly strengthens the plaintiffs’ position. Companies that ignore known security gaps face steeper penalties in court.

The judge overseeing the case has pushed both sides to work toward resolution. That pressure, combined with the strength of the plaintiffs’ evidence, suggests a settlement is more likely than a trial.

The Kroll SIM Swap Attack Lawsuit

The Kroll SIM swap attack lawsuit focuses on the specific method hackers used to breach Kroll’s systems. A SIM-swapping attack is when a criminal convinces a phone carrier to transfer someone’s phone number to a device the criminal controls.

In this case, the attacker targeted a Kroll employee through T-Mobile. Once they had control of the employee’s phone number, they received authentication codes meant for that employee.

Think of it like this: someone stole the key to your office by tricking the locksmith into making a copy. Kroll’s “lock” was SMS-based two-factor authentication, and it was disturbingly easy to pick.

Security experts have warned for years that SMS-based authentication is vulnerable. Kroll, a company that specializes in risk management, should have known better.

The lawsuit specifically alleges that Kroll failed to implement phishing-resistant authentication methods like hardware security keys or app-based authenticators. These stronger methods would have made the SIM-swap attack useless.

This detail matters because it goes to the heart of negligence. Kroll wasn’t using some obscure system that nobody knew was flawed. It was using a method that the entire cybersecurity industry had already flagged as inadequate.

Kroll FTX Data Breach Class Action

The Kroll FTX data breach class action represents the largest group of victims in this case. FTX, the collapsed cryptocurrency exchange, had roughly 9 million customers worldwide, and Kroll managed the bankruptcy claims process.

Not every FTX creditor was affected by the Kroll breach. But those who filed proofs of claim through Kroll’s online portal before August 2023 likely had their personal data exposed.

The FTX bankruptcy itself was already a disaster for customers who lost access to their funds. The Kroll breach added insult to injury by exposing the personal data of people who were trying to recover what they lost.

FTX creditors face a unique double risk. Their financial data from the exchange collapse is already circulating in criminal networks. The Kroll breach added their personal identification data on top of that.

If you were an FTX creditor and filed a claim through Kroll, you should be monitoring your credit reports closely. Free monitoring is available through annualcreditreport.com, and Kroll offered limited credit monitoring in the wake of the breach.

Key Takeaway: FTX creditors make up the largest victim group in the Kroll breach, and many face compounded risks from having both financial and personal data exposed across multiple incidents.

Kroll BlockFi and Genesis Data Breach

The Kroll BlockFi and Genesis data breach affected creditors of these two cryptocurrency lending platforms. Both companies filed for bankruptcy, and Kroll managed their claims processes just as it did for FTX.

BlockFi had approximately 450,000 creditors when it filed for Chapter 11 protection. Genesis Global had a smaller but still substantial creditor base estimated at over 100,000 individuals.

The data exposed for BlockFi and Genesis creditors mirrors what was taken from FTX files:

• Full names and contact information
• Social Security numbers or tax identification numbers
• Dates of birth
• Account balances and claim amounts
• Supporting financial documents uploaded during the claims process

These creditors were already dealing with significant financial losses from the collapse of their platforms. Many had their life savings locked up in crypto lending accounts.

The Kroll breach meant they had to worry about identity theft on top of trying to recover their money. For some, the breach led to fraudulent tax filings, unauthorized credit applications, and phishing attacks targeting their personal accounts.

Kroll Data Breach and Identity Theft Risks

Kroll data breach identity theft is a real and ongoing threat for affected individuals. When Social Security numbers, dates of birth, and addresses are stolen together, criminals have everything they need to impersonate someone.

The types of identity theft most commonly linked to data breaches like this one include:

• Tax fraud: Filing false tax returns to steal refunds
• Credit fraud: Opening new credit cards or loans
• Medical identity theft: Using stolen info for healthcare services
• Synthetic identity fraud: Combining real and fake data to create new identities
• Account takeover: Accessing existing bank or investment accounts

The stolen data from the Kroll breach is particularly dangerous because it includes financial context. Criminals know not only who you are but also that you had cryptocurrency investments and active bankruptcy claims.

That combination makes you a prime target for sophisticated phishing emails. Scammers can craft messages that reference your actual bankruptcy case to trick you into providing even more information.

Freeze your credit with all three bureaus (Equifax, Experian, TransUnion) if you haven’t already. A credit freeze is free and blocks anyone from opening new accounts in your name.

Kroll Data Breach Notification Letter

The Kroll data breach notification letter was sent to affected individuals starting in late August 2023. If you received one of these letters, it confirms that your personal information was among the data accessed during the breach.

The notification letters typically included:

• A description of the breach and how it occurred
• The types of data that were compromised
• An offer of free credit monitoring (usually 12 to 24 months)
• Instructions on how to enroll in identity protection services
• Contact information for questions

Keep this letter in a safe place. It serves as proof that Kroll identified you as a breach victim. When the settlement claim form becomes available, you may need to reference it.

If you never received a notification but believe your data was exposed, contact Kroll directly. Some letters may have gone to outdated addresses, especially for people who moved after filing their bankruptcy claims.

Don’t ignore the credit monitoring offer. Even if you think your data hasn’t been misused yet, criminals sometimes sit on stolen data for months or even years before using it.

Key Takeaway: Your Kroll notification letter is your key piece of evidence for the class action. Keep it safe, enroll in any offered credit monitoring, and use it as the basis for your future claim.

Kroll Settlement Administration Role

Kroll Settlement Administration is actually a division of Kroll that manages class action settlements for other companies. Yes, the same Kroll that suffered the data breach also runs a large settlement administration business. The irony is hard to miss.

Kroll Settlement Administration handles the logistics of distributing payments in class action cases. They process claims, verify eligibility, and mail out checks. They’ve managed settlements for cases involving major brands across every industry.

Here’s where it gets interesting. Kroll is unlikely to serve as the administrator for its own data breach settlement. Courts typically appoint a neutral third-party administrator to avoid conflicts of interest.

Don't miss this — Startups Lawsuit 2026: Eligibility, Payouts and Deadlines

For this case, expect a different settlement administrator to handle claims processing and payout distribution. Companies like Epiq Systems, JND Legal Administration, or Angeion Group commonly fill this role.

This distinction matters because any communications about the Kroll data breach settlement will come from the appointed administrator, not from Kroll Settlement Administration itself. Watch for official court-approved notices.

Is the Kroll Data Breach Lawsuit Still Open?

Yes, the Kroll data breach lawsuit is still open as of 2026. The case has not been dismissed, settled, or gone to trial. It remains in active litigation with settlement negotiations underway.

The case is very much alive. Plaintiffs’ attorneys continue to press forward, and the court has maintained its case management schedule.

Here’s the current status at a glance:

Some people worry that if a lawsuit takes a long time, it means it’s going nowhere. That’s not the case here. Complex data breach class actions routinely take 2 to 4 years from filing to resolution.

The fact that both sides are engaged in mediation and settlement discussions is actually a positive sign. It means there’s mutual interest in resolving the case without the expense and uncertainty of a trial.

If you’re an affected person, you don’t need to do anything right now except keep your records organized. When the settlement is approved, you’ll receive notice with specific instructions.

Kroll Cybersecurity Breach Lawsuit Status in 2026

The Kroll cybersecurity breach lawsuit status in 2026 shows a case moving toward resolution. All signs point to a settlement being finalized within the year, though court approval timelines can shift.

The litigation has reached the stage where both sides understand the strengths and weaknesses of their positions. Plaintiffs have strong evidence that Kroll’s security practices were inadequate. Kroll, for its part, likely wants to avoid a public trial that could damage its reputation even further.

Several factors could speed up or slow down the process. Court scheduling, objections from class members, and disagreements over settlement terms can all cause delays.

The judge has shown a preference for moving the case forward efficiently. That’s an encouraging sign for anyone waiting for a payout.

One potential wild card: if settlement talks collapse, the case could head to trial. A trial would likely push any resolution into 2027 or later. Based on current indicators, that outcome seems unlikely but remains possible.

Key Takeaway: The Kroll cybersecurity breach lawsuit is in its final stretch of settlement negotiations in 2026, with resolution and initial payouts expected by late 2026 or early 2027.

Frequently Asked Questions

How much money will I get from the Kroll class action lawsuit?

Most class members can expect between $50 and $300 for basic claims.

Those who can document identity theft or financial losses may receive $500 to $5,000 or more.

Final amounts depend on the total settlement fund and number of claims filed.

Who qualifies for the Kroll data breach settlement?

You likely qualify if your personal data was held by Kroll during the August 2023 breach.

This primarily includes creditors in the FTX, BlockFi, or Genesis bankruptcy cases.

Receiving a breach notification letter from Kroll is the clearest sign of eligibility.

What is the deadline to file a Kroll data breach claim in 2026?

No exact deadline has been set because the settlement hasn’t received final court approval yet.

Once approved, class members will have 60 to 120 days to submit claims.

The filing window is expected to open in mid-2026.

Was my data exposed in the Kroll SIM swap breach?

If you filed a bankruptcy claim through Kroll for FTX, BlockFi, or Genesis before August 2023, your data was likely exposed.

Kroll sent notification letters to affected individuals starting in August 2023.

Contact Kroll directly if you’re unsure whether your information was compromised.

How do I check the status of my Kroll class action claim?

Once the settlement is approved, a dedicated settlement website will be created where you can check your claim status.

Until then, monitor court filings in the Southern District of New York for case updates.

Signing up for class action tracking services can provide automatic notifications about new developments.

The Kroll class action lawsuit is heading toward a pivotal moment in 2026. If you were caught up in this breach, now is the time to organize your records and watch for the settlement notice.

Don’t let the deadline pass you by. Gather your breach notification letter, document any fraud or identity theft incidents, and be ready to file your claim as soon as the window opens.

Your data was supposed to be safe with Kroll. It wasn’t. Make sure you claim what you’re owed.

Something similar worth reading: Business Lawsuit Israel 2026: Full Filing and Payout Guide

Never Miss a Lawsuit Update

Mark Lawfold as a Preferred Source so you never miss a settlement deadline or new filing.