Confirming the notice
Settlement notices are a favorite disguise for phishing. Genuine ones usually identify the court and the case, name a settlement administrator, and point to an official settlement website where the same information appears. You can look up the case through the court's public records or check that the website matches the one listed in court filings. A legitimate data breach claim form generally does not ask you to email your full Social Security number or to pay anything. When in doubt, type the settlement website address yourself rather than following a link.
What to submit
Most claim forms offer several categories, such as reimbursement for documented out-of-pocket losses, payment for time spent on the fallout, monitoring services, or an alternative cash payment. Read which ones can be combined, since some are exclusive of each other. Documented-loss categories require proof, so attach statements, receipts, and reports that connect the loss to the period after the breach. Be accurate, because claims are reviewed and false statements on a claim form carry legal risk. Note the filing deadline, which is firm in most settlements, and keep a copy of what you submitted along with any confirmation number.
Staying in, opting out, or objecting
Staying in the settlement, whether or not you file a claim, generally means releasing claims against the company related to the breach. If you want to pursue your own claim instead, you usually need to opt out by the deadline stated in the notice. You can also object to the settlement's terms while remaining in it. If your losses are significant and well documented, a review before choosing may be worthwhile, and we can look at the notice, the release, and your records to explain what each option preserves. Payments in these settlements usually arrive only after final court approval and any appeals, which can take longer than people expect.
