How the Capital One settlement payment works

Capital One reached a settlement in 2019 over a data breach that exposed personal information of roughly 100 million customers and applicants. The settlement created a fund to compensate people affected by the breach. If you were part of that group, you may have received a notice in the mail or email about how to claim money from the fund.

The settlement does not require you to prove you suffered specific harm. Instead, it divides the money among all class members — people whose data was exposed — based on how many valid claims are submitted. The more people who claim, the smaller each individual payment becomes. Payments have ranged from under $25 to several hundred dollars per person, depending on the year and number of claims filed.

You do not need to contact Capital One directly to receive your payment. The settlement is managed by a claims administrator, and you submit your claim through them, not through the bank.

Key Takeaways

  • The settlement covers people whose personal information was exposed in Capital One's 2019 data breach, and you do not have to prove you were harmed to claim.
  • Payments come from a settlement fund managed by a third-party claims administrator, not from Capital One directly.
  • The amount you receive depends on how many people submit valid claims in a given claim period — more claims mean smaller individual payments.
  • You can claim multiple times if you were affected in multiple ways, such as having both a credit card account and a credit application exposed.
  • The deadline to claim varies by year; the settlement has extended the claims period multiple times, so check the official settlement website for current deadlines.

Who can claim from the settlement

You are part of the class if your personal information was exposed in the breach. This includes people who had a Capital One credit card, bank account, or credit application on file between January 1, 2005 and July 29, 2019. The breach exposed names, addresses, phone numbers, email addresses, dates of birth, and in some cases Social Security numbers, bank account numbers, and credit card numbers.

You do not need to have been a Capital One customer to be part of the class. People who applied for Capital One products but never opened an account are also covered. If you received a notice about the settlement, you are almost certainly may be able to access to claim.

How to submit a claim

Visit the official settlement website listed in your notice or search for "Capital One data breach settlement" to find the claims portal. You will need to provide your name, address, and the last four digits of a Social Security number or account number associated with your exposure. The claims administrator uses this information to verify you are part of the class.

You can submit your claim online, by mail, or by phone, depending on what the current claims administrator offers. Online submission is usually fastest. Keep any confirmation number or receipt the administrator gives you — you may need it to check your claim status later.

If you have multiple accounts or applications that were exposed, you may be able to file separate claims for each one. Check the settlement website or call the claims administrator to ask whether your situation qualifies for multiple claims.

When payments are sent and how you receive them

After you submit a valid claim, the administrator processes it and adds your name to the list of approved claimants. Payments are usually sent in batches several months after a claims period closes. The exact timeline depends on how many claims were submitted and how long verification takes.

Payments are typically sent by check mailed to your address on file. Some settlement administrators also offer direct deposit if you provide banking information. If you move, update your address with the claims administrator so your check reaches you.

If your check is lost or never arrives, contact the claims administrator with your confirmation number. They can issue a replacement or stop payment and send funds by another method.

What happens if you miss the deadline

The settlement has had multiple claim periods with different deadlines. Earlier deadlines have passed, but the settlement administrator has extended the claims window several times. Check the official settlement website to see whether claims are currently open and what the next deadline is.

If you miss a deadline, you may still be able to claim in a future claims period if the settlement extends again. However, do not assume this will happen — submit your claim as soon as you can to avoid losing the opportunity.

Tax treatment of your settlement payment

Settlement payments for data breaches are generally not taxable income. The IRS treats them as compensation for harm or loss, not as wages or earnings. You should not receive a 1099 form for a settlement payment from this breach.

If you have questions about how the payment affects your taxes, speak with a tax professional or contact the IRS directly. The claims administrator can also tell you whether they report the payment to the IRS.

Frequently Asked Questions

Do I have to do anything to get my payment, or does it come automatically?

You must submit a claim. The settlement does not automatically pay everyone — only people who file a claim receive money. If you received a notice in the mail, it includes instructions for claiming. If you did not receive a notice but think you were affected, visit the settlement website to check whether you can still claim.

How much money will I get?

The amount varies based on how many people claim in each claims period. Early claims periods paid more per person because fewer claims were filed. Recent payments have been smaller because more people have claimed. The settlement website shows the payment amount for the current or most recent claims period.

What if I never received a notice about the settlement?

Search online for "Capital One data breach settlement" and visit the official claims website. You can check whether your information is in the class and file a claim even if you did not receive a mailed notice. The website has a search tool where you enter your name and address.

Can I claim if I was a Capital One customer but my data was not exposed?

No. The settlement covers only people whose personal information was actually exposed in the breach. If you were a customer but your data was not part of the exposed records, you are not part of the class and cannot claim.

What should I do if I received a check but never filed a claim?

Contact the claims administrator immediately with the check number and amount. Unclaimed checks are sometimes sent in error. Do not cash a check you did not claim for — contact the administrator to clarify your status and return the check if needed.