Taking claims · closes September 3, 2026
You may qualify for the Circle K data breach settlement if Gas Express sent you a notice about the May 2024 attack
Last checked July 17, 2026
If Gas Express LLC, the company behind Circle K stores, sent you a notice about its May 2024 cyberattack, you can file for a flat $50 with no paperwork. Documented out-of-pocket losses pay up to $2,000 and need receipts. Everyone who files can also take two years of CyEx credit monitoring.
The case is Canup v. Gas Express LLC. The breach may have exposed names, addresses, Social Security numbers, and financial account details. Gas Express denies wrongdoing. Claims are due September 3, 2026.
You may qualify if
- ✓You received a data breach notification from Gas Express LLC (Circle K) about the May 2024 cyberattack.
- ✓You live in the United States and your personal information was involved.
- ✓For the $50 payment, you self-certify and attach nothing.
- ✓For up to $2,000, you have receipts, bank statements, or other records of losses between May 20, 2024 and September 3, 2026 that trace back to the breach.
What you need to file
The online form is five steps: open the claim form on gasexpressdatasettlement.com, confirm you got the notice, pick the $50 tier or the documented-loss tier, upload evidence if you chose losses, and submit. The $50 path takes a few minutes.
Save your confirmation number. The credit monitoring, CyEx Financial Shield Complete with up to $1 million in identity theft insurance, is available to every claimant.
Deadline and what you get
File by September 3, 2026.
The $50 is a flat payment and does not shrink with the number of claims. The documented-loss tier reimburses real costs such as identity theft expenses, out-of-pocket credit monitoring, or bank charges, up to $2,000 per person.
Filing on the settlement site is free, and the administrator decides who is eligible. The Payout app lists this settlement and links to the same form.
Questions about the Circle K Data Breach case
I shop at Circle K but never got a letter. Am I in?
The class is people who received the breach notification. Without a notice, the settlement site is the place to check whether your information was involved.
Can I claim the $50 and documented losses both?
The form asks you to choose a tier. The settlement site spells out whether combinations are allowed.
What kind of receipts count for the $2,000 tier?
Receipts, bank statements, or similar records showing out-of-pocket costs between May 20, 2024 and September 3, 2026 that are tied to the breach.
Check the other 53 at once
Payout runs your purchases and addresses against every open case and files the ones you are in. Free. You keep the whole check.