A data-breach notice can be easy to file away when no fraudulent charge appears immediately. For people affected by an October 2024 incident involving cannabis retailer STIIIZY, that old notice may now be the key to a settlement claim worth as much as $7,500 for documented costs. The filing window remains open, but it closes September 10.
The administrator offers two different cash paths
The court-authorized STIIIZY settlement administrator says class members can choose a pro rata cash-fund payment that requires no documentation or seek reimbursement for documented money spent protecting their data or dealing with the incident. The documented-loss option is capped at $7,500 per person.
The simpler cash payment has no advertised fixed amount. After approved administration expenses, legal fees, service awards, credit-monitoring costs and documented-loss claims are deducted, the remaining money will be divided among valid claimants. California class members receive twice the share of non-California class members under that formula.
Free retirement updates: Every year, billions in settlements and unclaimed money go unclaimed. Our free Retirement Shield newsletter sends the real ones — with deadlines — a couple times a week. Get the free newsletter.
Eligibility follows the breach notice, not shopping frequency
The class covers people whose personal information held by STIIIZY may have been accessed by an unauthorized third party in October 2024. The administrator says someone who received a notice from the company, or has reason to believe the incident affected them, may be a class member. A claimant should use the official site rather than a generic settlement listing to test that status.
The lawsuit alleges STIIIZY failed to use reasonable security; the company denies wrongdoing. The $2.95 million agreement resolves those claims without a court deciding liability. Class members who remain in the settlement give up covered legal claims whether or not they submit for money, which makes doing nothing financially different from opting out.
The $7,500 claim needs a loss trail
Receipts, account statements, invoices and correspondence can connect an expense to breach response or identity misuse. The administrator says reimbursement depends on the amount lost or spent, the available records and the total claims filed. Writing “identity theft” on a form without supporting evidence does not turn the maximum into an automatic award.
A useful claim file puts each expense on a timeline: when the notice arrived, when suspicious activity occurred, what was paid, whether insurance or another company reimbursed any part, and how the item relates to the breach. Only unreimbursed loss belongs in the request. Claimants should keep copies of everything submitted and the confirmation page.
Credit monitoring is separate from the cash election
Class members can also request two years of three-bureau credit monitoring, fraud consultation, identity-restoration service and identity-theft insurance coverage. Someone who already has monitoring can elect to defer enrollment for 12 months, according to the administrator. Insurance coverage is not the same as a guaranteed $1 million payment; it applies under the service’s terms.
A freeze can provide stronger account-opening protection than monitoring alone because it restricts access to a credit file. Monitoring reports activity after it appears. People who claim the settlement should still secure financial and email accounts, use unique passwords and review reports for unfamiliar accounts rather than treating the settlement benefit as a complete defense.
September 10 is the claim deadline, not the payment date
The claim form must be submitted online or mailed as directed by September 10. The settlement approval hearing is scheduled for October 19, and the official settlement site states that payments will occur only if the court approves the agreement. Processing and any later challenge can add time after the filing deadline.
No legitimate administrator should charge a fee to release this benefit or ask for a bank password. The official site gives the case number, administrator address and court documents needed to verify the process. For an affected consumer, the immediate financial task is not predicting the final pro rata check; it is preserving proof and getting a valid claim into that official system before September 10.
The release decision has a financial value of its own
Remaining in the class means giving up covered claims against STIIIZY even if no claim form is filed. Opting out preserves the ability to pursue an individual case but forfeits settlement benefits. The court-authorized long-form notice puts the opt-out deadline on August 26, earlier than the claim deadline, so a person considering separate litigation cannot wait until September 10 to make both decisions.
Most consumers will not hire a lawyer over a modest documented expense, but someone with substantial identity-theft loss may want independent advice before accepting a release. The comparison is not the advertised $7,500 maximum alone. It is the documented individual harm, the cost and uncertainty of separate litigation, and the settlement benefits actually available.
A claim and an objection are different. The administrator says a class member may object and still submit a claim, while opting out removes the person from the class. Reading those choices in the official notice prevents an irreversible rights decision from being made through an unofficial article or social-media summary.
This article was researched and drafted with AI assistance and reviewed against the linked primary sources.
More Financial Reading
- How many CDs can you park at 1 bank? FDIC rules you must know
- Adding someone to your bank account: tax traps and smart moves



