Company Breach Compensation and Recovery Offers
After a big breach, you may hear about compensation, settlements or recovery services. How genuine settlements work, how to spot claim scams, and what to check before sharing any details.
When a well-known company is breached, compensation often follows in the news: settlements, free credit monitoring, refunds. Criminals follow the news too. They send fake settlement notices, advertise "claims firms" that charge fees, and offer "recovery services" that promise to fix everything. Here is how to tell the difference.
What genuine help usually looks like
- Free monitoring or identity protection, offered by the breached company through its official notice.
- Court-approved settlements, in some countries, with an official settlement website and public notice.
- Complaint routes to data protection regulators, which are free to use.
Genuine schemes do not charge you to claim, and they do not ask for passwords or bank logins.
Common compensation scams
| Scam | Red flag |
|---|---|
| Fake settlement emails | Links to lookalike sites asking for card or bank details |
| Claims firms charging upfront fees | Payment before any compensation |
| "Recovery" services | Promises to recover losses or remove data for a fee. See recovery scams |
| Calls quoting leaked data | "We can see you were affected; confirm your bank details to receive payment" |
hxxps://breach-settlement-payments[.]com within 72 hours.- A deadline and a request for card details to "receive" money.
- A domain you cannot confirm through official sources.
How to check
- Find the settlement or offer on the company's official site or reputable news.
- Use the official settlement website named there, by typing the address.
- Never pay to claim, and never share passwords or bank logins.
- Ask your country's data protection regulator if unsure.
Received a compensation offer? Paste it into CyberWatch AI Scan for a free check.
For more, see what to do after a data breach in our identity and account security guide.
Frequently asked questions
Are data breach settlements real?
Yes, in some countries and cases, courts approve settlements that pay affected people. They are publicised through official settlement websites and notices, and you do not pay to claim.
How do I check a settlement is genuine?
Look for it on the company's official website, court records or reputable news, and use the official settlement website named there, typed yourself.
What details should a genuine claim ask for?
Usually basic contact details and sometimes a claim ID from your notice. Be very wary of requests for full card numbers, bank logins, passwords or upfront fees.
Sources
- Data breach recovery, IdentityTheft.gov (US Federal Trade Commission)
- Refund and Recovery Scams, US Federal Trade Commission
- Data breach guidance for individuals, UK National Cyber Security Centre
