STIIIZY $2.9M Data Breach Settlement 2026: How to Claim Up to $7,500 Before the September Deadline

STIIIZY $2.9M Data Breach Settlement 2026: The $2.9 million data breach settlement getting attention in 2026 is the STIIIZY, Inc. class action settlement, and it’s important to be specific here, since several unrelated data breach settlements of a similar size are active at the same time, including a separate $2.5 million Fidelity Investments settlement with an already-passed July 27, 2026 deadline. STIIIZY agreed to pay $2,950,000 to resolve claims that it failed to adequately protect customer data after an October 2024 breach, disclosed to affected individuals on January 7, 2025, that compromised the personal information of 387,555 current and former customers. If you received a notice about this specific breach, you still have time: the claim filing deadline is September 10, 2026, and eligible claimants can receive up to $7,500 in documented losses or a pro rata cash payment, plus two years of credit monitoring. We’ll be updating this article monthly as the case moves toward its final approval hearing and payment distribution begins.

This guide walks through exactly what happened in the STIIIZY breach, who qualifies, how much you can actually claim, the real dates you need to know (not outdated ones still circulating from earlier, incorrect reporting), and how to file your claim correctly before time runs out. Every detail here is sourced directly from the official settlement administrator and court-tracked class action filings, not secondhand summaries.

STIIIZY $2.9M Data Breach Settlement 2026 Key Highlights

What Happened in the STIIIZY Data Breach?

STIIIZY, Inc., a cannabis vape and retail brand, experienced a cybersecurity incident in October 2024 in which an unauthorized third party gained access to files containing customers’ personal information. The company notified affected individuals on January 7, 2025. According to the class action lawsuit that followed, plaintiffs alleged STIIIZY failed to implement reasonable cybersecurity measures that could have prevented the breach, resulting in personally identifiable information, and in some cases private health information, being exposed. In total, the breach affected 387,555 current and former customers and other individuals. STIIIZY has not admitted wrongdoing, and no court has ruled on the underlying allegations, the company agreed to settle rather than continue litigating the claims.

Fact Check: Is There Really a $500 Cash Alert in 2026?

Quiet IRS Rule Shift 2026: How the SALT Cap Increase Could Mean an Extra $800 for Some Americans

Am I Eligible to File a Claim?

You’re likely eligible if you received a data breach notification letter or email from STIIIZY informing you that your personal information may have been affected by the October 2024 incident. If you believe you were affected but haven’t located your notice, you can typically request help identifying your Class Member ID directly through the official settlement website’s contact page, rather than guessing or searching for the code elsewhere.

How Much Money Can You Actually Claim?

The STIIIZY settlement offers two different cash options, but you can only choose one:

• Documented losses: up to $7,500 per claimant, but only if you can provide supporting documentation, such as receipts, bank or credit card statements showing unreimbursed fees, or other proof of fraud or identity theft reasonably traceable to this specific breach
• Pro rata cash payment: available to class members who didn’t experience documented losses; the exact amount depends on how many people file valid claims and how the net settlement fund is divided. California class members receive twice the share of non-California class members under the settlement terms

Regardless of which cash option you choose, all class members are also eligible for:

• Two years of free credit monitoring (three-bureau)
• Up to $1 million in identity theft insurance coverage
• Fraud consultation and identity theft restoration services

What Are the Real, Current Deadlines? (Don’t Rely on Outdated Dates)

This matters more than usual for this particular settlement, because some earlier, lower-quality articles circulated incorrect dates, including a claimed December 22, 2025 deadline and a January 7, 2026 court approval date, neither of which match the actual, currently confirmed court schedule. Based on the verified, official timeline as tracked by multiple independent class action monitoring services:

As of this update, the September 10, 2026 claim deadline has not yet passed, so eligible class members still have time to file, but should not delay given how close that date is approaching.

State-by-State Social Security Payments 2026: Where Benefits Are Highest?

Stimulus Check 2026: Fact-Checking Every Viral Payment Claim (Tracker)

How Do I Actually File a STIIIZY Data Breach Claim?

1. Go directly to the official settlement website: StiiizyDataBreachSettlement.com
2. Locate your Class Member ID from your notification email or mailed letter
3. Decide whether you’re claiming documented losses (requiring supporting proof) or the pro rata cash payment (no receipts required, but no guarantee of the full $7,500)
4. If claiming documented losses, upload your supporting records, such as receipts, invoices, or statements showing unreimbursed costs or fraudulent charges tied to this breach
5. Opt in to the free credit monitoring benefit separately if you want it, since this is available regardless of which cash option you choose
6. Submit your claim online, or alternatively mail a paper claim form to the settlement administrator’s address listed above
7. Submit before September 10, 2026, since late claims are not guaranteed to be accepted

Should I Exclude Myself or Object Instead of Filing a Claim?

Most affected individuals will benefit from simply filing a claim to receive cash and/or credit monitoring. However, if you would prefer to preserve your right to sue STIIIZY separately over this same data breach, you must formally exclude yourself (opt out) by August 26, 2026. If you disagree with the settlement’s terms but still want to remain part of the class, you can instead file a formal objection by that same date. Both of these options mean you would not receive a payment through this settlement process.

Is This the Same as the Fidelity Data Breach Settlement?

No, and it’s worth being clear about this distinction since both involve a similarly-sized fund and both generated “data breach settlement” headlines around the same time. The Fidelity Investments data breach settlement is a separate $2.5 million fund, tied to a different August 2024 cybersecurity incident, offering $100 flat payments (plus $50 extra for California residents) or reimbursement of documented losses up to $5,000. That settlement’s claim deadline was July 27, 2026, which has already passed as of this update. If you’re specifically looking for the STIIIZY settlement, make sure you’re on StiiizyDataBreachSettlement.com, not a page describing the Fidelity case or any other unrelated breach.

What Happens After I File My Claim?

Once you submit a valid claim, the settlement administrator will process it alongside all other submitted claims. Payments are not issued immediately, they depend on the settlement receiving final court approval at the October 19, 2026 hearing, and, in the case of documented-loss claims, verification of your submitted supporting records. Based on the settlement’s own stated timeline, payments are typically issued approximately 30 days after claims processing is completed, or 60 days after final approval, whichever timeline framework the administrator applies, meaning payments could realistically begin arriving in late 2026 or early 2027, assuming no appeal delays the process further.

How to Avoid Scams Related to This Settlement

• Only use the official website: StiiizyDataBreachSettlement.com is explicitly identified as the authorized site for this specific settlement
• Be cautious of unsolicited calls or texts asking for payment or banking information to “process” your claim, the legitimate claims process does not require you to pay anything upfront
• Verify your Class Member ID request only through the official settlement website’s contact page, not through a third-party link
• Cross-check any settlement claiming this exact case against the official court docket if you’re unsure whether a site is legitimate

Official Resources & Status Check Links

FAQs

Conclusion

The STIIIZY $2.9 million data breach settlement is real, currently active, and, unlike some similarly sized settlements circulating in the news right now, still open for new claims through September 10, 2026. If you received a breach notification from STIIIZY about the October 2024 incident, the most important thing to do is confirm your Class Member ID and decide between the documented-loss and pro rata cash options before that deadline arrives, since missing it generally means forfeiting your right to a payment. Given how many similarly worded “$2.9 million data breach settlement” articles are circulating with outdated or incorrect dates, always confirm the current deadline directly on the official StiiizyDataBreachSettlement.com website rather than an older article, including this one, without checking for the latest update.

Also Read

2027 Social Security COLA Forecast: Latest Estimate, Medicare Offset & What Retirees Can Expect

$2000 Stimulus Payment July 2026: Full Fact-Check on Trump’s Tariff Dividend Plan

Centrelink Double Payment Alert – $1678 Centrelink Advanced Pension Payment 2026 Available Now!

$215.40 Centrelink Rent Assistance Increase 2026 – Are You Eligible?