$2.3M Sysco data breach class action settlement

Sysco agreed to a $2.3 million class action lawsuit settlement to resolve claims it failed to protect consumers from a 2023 data breach.

The Sysco settlement benefits individuals who reside in the United States to whom Sysco sent notice of the cybersecurity event in or around May 2023.

According to a class action lawsuit, Sysco could have prevented the 2023 data breach through reasonable cybersecurity measures but failed to do so, resulting in a cybersecurity event. Plaintiffs in the case say they had to spend time and money to protect themselves from identity theft and fraud and are now at an increased risk for future identity theft and fraud as a result of the breach.

Sysco is a food distribution company that provides food, equipment and supplies to restaurants, healthcare and educational facilities, hotels and other customers.

Sysco has not admitted any wrongdoing but agreed to pay $2.3 million to resolve these allegations.

Under the terms of the Sysco data breach settlement, class members can receive up to $5,000 for documented out-of-pocket losses related to the data breach. This reimbursement includes unreimbursed costs, losses or expenditures incurred as a result of identity theft or fraud, falsified tax returns or other possible misuse of personal information.

In addition to expense reimbursement, class members can also receive a residual cash payment from the settlement. Residual cash payments are currently estimated to be between $100 and $200, but may be as high as $599.

All class members are eligible for two years of free credit monitoring services. These services include dark web scanning, identity theft insurance, real-time credit monitoring with the three major credit bureaus and access to fraud resolution agents.

The deadline for exclusion and objection is Aug. 8, 2025.

The final approval hearing for the Sysco data breach settlement is scheduled for Oct. 9, 2025.

To receive settlement benefits, class members must submit a valid claim form by Sept. 8, 2025.

Who’s Eligible

Individuals who reside in the United States and to whom Sysco sent notice of the cybersecurity event in or around May 2023.

Potential Award

Up to $5,000 in out-of-pocket losses and a residual cash payment of up to $599.

Proof of Purchase

Receipts, invoices, account statements, tax forms, IRS letters, legal documents, financial forms and other documentation of data breach-related losses.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

09/08/2025

Case Name

Trottier, et al. v. Sysco Corporation, Case No. 4:23-cv-01818, in the U.S. District Court for the Southern District of Texas

Final Hearing

10/09/2025

Claims Administrator

Sysco Cybersecurity Event Litigation
Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324
833-420-3835

Class Counsel

Patrick A. Barthle II
MORGAN & MORGAN COMPLEX LITIGATION GROUP

Gary Klinger
MILBERG COLEMAN BRYSON PHILLIPS GROSSMAN PLLC

Defense Counsel

Kelsey M. Machado
Ian S. Shelton
BAKER & MCKENZIE LLP