A $2.95 million settlement resolving a 2024 data breach at STIIIZY, the California cannabis retail and delivery brand, is now accepting claims from customers whose personal information was exposed in the incident. Eligible members of the settlement class can choose a documented-loss payment of up to $7,500 or a no-proof cash payment, and everyone who files also receives two years of credit monitoring. The deadline to submit a claim is September 10, after which the fund stops accepting new filers.
The October 2024 breach behind the payout
The incident traces to a compromise of a point-of-sale vendor STIIIZY used, with unauthorized access occurring roughly between October 10 and November 10, 2024, and the vendor alerting the company on November 20, 2024, according to the notice of data breach STIIIZY filed with the California Attorney General’s office. The records exposed varied by customer and could include names, addresses, dates of birth, driver’s license or other government-issued ID numbers, photos, signatures and purchase histories. STIIIZY publicly announced the breach on January 7, 2025, and the company’s own public notice put the number of people whose data was involved in the hundreds of thousands. The lawsuits that followed were consolidated in the U.S. District Court for the Central District of California as In re: STIIIZY Inc. Data Breach Security Litigation, Case No. 2:25-CV-00490. STIIIZY denies wrongdoing, and the settlement resolves the claims without any admission of liability.
Free retirement updates: Social Security and Medicare change every year, and nobody sends you a memo. Our free Retirement Shield newsletter breaks down what changed and what to do. Get it free in your inbox.
How the $7,500 documented-loss payout and the no-proof cash option work
Class members pick one of two payment tracks, not both, according to the settlement’s frequently-asked-questions page. Anyone who can show a paper trail — bank or card statements reflecting fraud charges, receipts for credit-monitoring services already purchased, or documented hours spent resolving identity theft — can file for reimbursement of breach-related losses up to $7,500 per person. Anyone without receipts can instead select the pro-rata cash option on the claim form; that payment is drawn from what remains of the $2.95 million fund after attorneys’ fees, administration costs and documented-loss payments are subtracted, then split among everyone who chose that option, so the exact dollar figure is not fixed until claims close. A built-in safeguard protects documented-loss filers too: if a claimant’s proven losses would add up to less than the pro-rata amount, the settlement pays the larger pro-rata figure automatically. California residents who pick the pro-rata option receive double the share of claimants living outside the state, a term specific to this settlement.
What the credit monitoring and insurance coverage include
Every valid claimant, regardless of payment track, also qualifies for two years of credit monitoring across all three national credit bureaus, fraud consultation, identity-theft restoration services, and up to $1,000,000 in identity-theft insurance, all at no cost and with no documentation required to enroll. A class member who already pays for comparable credit monitoring can elect to defer enrollment by 12 months at no extra charge rather than let the benefit go unused. Filing takes a Class Member ID printed on the notice a customer received by mail or email; someone who never received a notice but believes their data was involved can still start a claim by supplying identifying information for the administrator to verify.
What filing by September 10 requires, and what the fund costs to run
Claims can be filed online or mailed to the Stiiizy Data Breach Claims Administrator, and either method must be completed by September 10. The deadline to exclude oneself from the settlement or object to its terms already passed on August 26, and a federal judge is scheduled to weigh final approval of the deal at an October 19 hearing. Court filings show administering the settlement is expected to cost roughly $280,840, and class counsel intends to ask the court for up to $737,500 in attorneys’ fees plus $30,000 in expenses and $15,000 in service awards split among the class representatives, all paid from the settlement fund rather than billed to class members directly, and all still subject to the court’s approval.
Why a class-action claims window does not reopen
Unlike a recurring government benefit, a class-action claims period closes for good once its deadline passes. A class member who misses September 10 forfeits both payment options and the credit-monitoring benefit, even though the settlement’s release terms still bind affected customers to the case’s resolution whether or not they filed. Anyone unsure whether their information was involved can confirm eligibility and review the full settlement agreement and court filings directly through the settlement administrator’s own site rather than a third-party claims aggregator that never sent the notice and cannot verify a Class Member ID.
This article was researched and drafted with the assistance of AI and reviewed by The Financial Wire editorial team.
More Financial Reading
- What really happens to your joint savings account when you die?
- Bank statements: how long to keep them and when to toss them
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
