Circle K’s data-breach settlement pays $50 with no proof, but the deadline to claim is September 3

Circle K convenience store

A convenience-store data breach that leaked names and Social Security numbers has turned into a class-action settlement that pays out cash, and the window to claim is closing fast. People whose information was exposed in a 2024 breach tied to a Circle K franchisee can collect a flat $50 with no paperwork at all, and older shoppers who have already spent hours untangling identity-theft messes may qualify for far more. The catch is a firm deadline: claims must be filed by September 3, 2026.

What the Gas Express settlement covers

The settlement resolves claims over a May 2024 data breach at Gas Express LLC, a Circle K franchisee. According to the settlement notice, the exposed information included names paired with Social Security numbers, the exact combination that lets criminals open credit lines, file fraudulent tax returns, and drain financial accounts. Anyone who received a notice that their personal information was involved is a class member.

Two payment paths are on the table. A class member can take a straight $50 cash payment with no proof required, or instead seek reimbursement of up to $2,000 for documented losses tied to the breach. Both options come with free credit monitoring, a benefit worth having when a Social Security number is already in the wrong hands. For a retiree living on a fixed income, even the no-proof $50 is money that would otherwise go unclaimed.


Free retirement updates: Every year, billions in settlements and unclaimed money go unclaimed. Our free Retirement Shield newsletter sends the real ones — with deadlines — a couple times a week. Get the free newsletter.

How to file a claim before September 3

Claims are submitted through the official settlement administrator at GasExpressDataSettlement.com, using the ID and PIN printed on the mailed notice. Those codes matter: they tie a claim to a specific class member and speed up processing. Anyone who received a notice but misplaced it can generally contact the administrator listed on that site to recover the credentials rather than assume the chance is lost.

September 3, 2026, is more than the deadline to file a claim. Under the settlement’s schedule, it is also the deadline to exclude oneself from the settlement or to file an objection. Someone who does nothing by that date collects nothing and still gives up the right to sue over the breach separately. The final approval hearing is scheduled for September 18, 2026, after which payments are typically processed if the court signs off.

The choice between the $50 flat payment and the documented-loss option comes down to records. A class member who can show real out-of-pocket costs from the breach, such as fraudulent charges, credit-freeze fees, or time spent that carries a documented value, may recover up to $2,000. Those who cannot document losses, or simply want the simplest route, take the flat cash. The reporting compiled by consumer-settlement trackers lays out both tiers, but the binding terms and the claim form live on the administrator’s own site.

Anyone weighing the documented-loss route should gather supporting paperwork before filing rather than after. Bank and credit-card statements that show unauthorized charges, receipts for credit freezes or identity-protection services purchased since the breach, and notes on hours spent contesting fraud all build the record that supports a claim above the flat $50. Filing without that documentation, and then hoping to add it later, is the common mistake that shrinks a payout. For most class members with no obvious losses, the no-proof cash and the bundled monitoring remain the practical choice, and both require nothing more than the mailed ID and PIN.

Why a name and Social Security number is the costly combination

Breaches that expose a Social Security number sit in a different risk category than a leaked email address. That number does not change, cannot be reset like a password, and unlocks credit in a person’s name for years. For older Americans, the stakes are sharpened by the fact that new-account fraud and tax-refund fraud often go unnoticed until a denied loan or a rejected tax filing surfaces the damage. The free credit monitoring bundled into this settlement is a direct answer to that exposure, and it costs nothing beyond filing the claim.

There is a secondary risk worth naming: scammers watch for publicized breaches and settlements, then call or email posing as the administrator to “verify” a Social Security number or bank details before releasing a payment. A real settlement administrator does not cold-call class members demanding sensitive information, and it never charges a fee to file. Any such approach is itself a fraud attempt riding on the original breach, and the defense is to initiate contact through the known administrator site rather than responding to an inbound message.

The broader lesson for retirees is that legitimate data-breach settlements do exist, they do pay real money, and they run on short calendars. Class members are usually notified by mail, which is easy to mistake for junk. Keeping breach notices, checking whether a settlement site is the court-appointed administrator rather than a copycat, and filing before the stated deadline are the steps that turn a notice into a payment. In this case, the settlement is open now, the money is available with or without proof of loss, and the clock runs out on September 3, 2026.

This article was produced with AI assistance and reviewed by The Financial Wire editorial team.

More Financial Reading

Social Security and Medicare change every year, and nobody sends you a memo. Get the free newsletter.

Free from Retirement Shield. Unsubscribe anytime. We never ask for money.