Circle K data breach class action settlement

Gas Express LLC — which does business as Circle K — has agreed to a class action settlement to resolve claims arising from a targeted cyberattack on its computer systems that occurred in May 2024.

The Circle K class action settlement benefits all individuals residing in the United States who were sent a notice by Circle K that their private information was impacted in the data incident.

According to the class action lawsuit, certain files containing private information — including names and Social Security numbers — were accessed during the May 2024 cyberattack on Circle K’s systems. As a result, affected individuals were allegedly exposed to risks of identity theft and financial fraud.

Circle K is a convenience store and gas station chain operating across the United States.

Circle K has not admitted any wrongdoing in this class action settlement but agreed to pay an undisclosed amount to resolve the data breach class action lawsuit.

Under the terms of the Circle K settlement, class members can receive one of two cash payments. Class members with documented out-of-pocket losses caused by the data incident may claim up to $2,000 in reimbursement for expenses, such as identity theft losses, credit monitoring fees and costs to replace identification documents.

Alternatively, class members without documented losses may claim a one-time $50 cash payment without providing proof or explanation.

All class members can additionally receive two years of CyEx Financial Shield Complete credit monitoring, which includes $1 million in financial fraud insurance and monitoring for identity theft, unauthorized financial transactions and personal information associated with high-risk transactions.

The deadline for exclusion and objection is Sept. 3, 2026.

The final approval hearing for the Circle K settlement is scheduled for Sept. 18, 2026.

To receive settlement benefits, class members must submit a valid claim form by Sept. 3, 2026.

Who’s Eligible

The Circle K class action settlement includes all individuals residing in the United States who were sent a data breach notice informing them that their private information was impacted in the May 2024 cyberattack.

Potential Award

Up to $2,000 in documented losses or an alternative $50 payment.

Proof of Purchase

Documentation of personal expenses, such as receipts or credit card statements. Personal certifications, declarations or affidavits may provide supporting clarification.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

09/03/2026

Case Name

Brittany Canup, et al. v. Gas Express LLC d/b/a Circle K, Case No. 25EV012357, in the State Court of Fulton County, Georgia

Final Hearing

09/18/2026

Settlement Website

GasExpressDataSettlement.com

Claims Administrator

Circle K Data Incident Settlement
c/o Settlement Administrator
P.O. Box 25226
Santa Ana, CA 92799

[email protected]
833-386-6575

Class Counsel

Jeff Ostrow
KOPELOWITZ OSTROW P.A.

Tyler J. Bean
SIRI & GLIMSTAD LLP

Casondra Turner
MILBERG PLLC

Kevin Laukaitis
LAUKAITIS LAW LLC

Defense Counsel

Sanjay S. Karnik
CHILIVIS GRUBMAN LLP