Panda Restaurant Group, the parent company of Panda Express, agreed to pay $2.45 million to settle a class action lawsuit stemming from a 2024 data breach that exposed customer payment card information and personal data. Affected individuals can claim up to $5,000 for documented out-of-pocket losses, along with credit monitoring services.
Find more open class action settlements on OpenClassActions.com.
Status: Settlement Reached — $2.45 Million | Up to $5,000 Per Person
What Happened?
In 2024, Panda Restaurant Group discovered that unauthorized individuals had gained access to systems containing customer data. The breach affected customers who had made purchases at Panda Express locations and through its digital ordering platforms. The compromised data included:
- Payment card numbers — credit and debit card information used to make purchases
- Names — as associated with payment cards and customer accounts
- Email addresses
- Other personal information — depending on what the customer provided during transactions or account creation
Payment card breaches are particularly concerning because the stolen information can be used almost immediately to make fraudulent purchases. Unlike a Social Security number breach where the harm may take months or years to materialize, stolen credit card data often leads to unauthorized charges within days or weeks of the breach.
Who Can File a Claim?
The settlement covers individuals in the United States whose personal information or payment card data was compromised in the 2024 Panda Express data breach. If you received a notification letter from Panda Restaurant Group informing you that your data was affected, you are almost certainly a class member.
Even if you did not receive a notification, you may still be eligible if you made purchases at Panda Express during the affected time period and your payment information was compromised. The settlement administrator can verify eligibility based on transaction records.
What Can You Claim?
The $2.45 million settlement fund provides several types of compensation:
- Documented out-of-pocket losses up to $5,000 — this includes fraudulent charges on your payment cards, fees for replacement cards, costs of credit monitoring services you purchased, and any other direct expenses you incurred because of the breach
- Time spent dealing with the breach — you can claim compensation for time spent monitoring accounts, disputing charges, and dealing with the fallout, typically at an hourly rate set by the settlement terms
- Credit monitoring — free credit monitoring and identity theft protection services for eligible class members
- Alternative cash payment — class members who do not have documented losses may be eligible for a smaller flat payment, subject to the total number of claims filed
The $5,000 per-person cap is notable for a settlement of this size. If you experienced significant fraud or expenses as a result of the breach, you should gather all documentation and submit a detailed claim.
How to Maximize Your Claim
To receive the highest possible payment from the settlement, you need documentation. The more evidence you can provide of actual financial harm, the more you are likely to receive. Here is what to gather:
- Bank and credit card statements showing fraudulent charges that occurred after the breach
- Receipts for replacement cards if your bank charged a fee to issue new debit or credit cards
- Proof of credit monitoring purchases if you signed up for a monitoring service because of the breach
- Records of time spent dealing with fraud — note the dates and approximate time you spent on phone calls, disputes, and account monitoring
- Correspondence with your bank or credit card company about disputed charges
- The notification letter from Panda Restaurant Group, if you received one
Protecting Yourself After a Payment Card Breach
Whether or not you file a claim in this settlement, if your payment information was compromised you should take immediate steps to protect yourself:
- Request new card numbers — contact your bank or credit card issuer and ask for replacement cards with new numbers
- Review your statements carefully — look for any charges you do not recognize, no matter how small, as criminals often test stolen cards with small purchases before making larger ones
- Set up transaction alerts — most banks allow you to receive text or email alerts for every transaction on your account
- Change passwords — if you had an online account with Panda Express, change your password there and on any other site where you used the same password
- File a dispute immediately — if you find fraudulent charges, report them to your bank right away to maximize your chance of getting the money back
Case Details
| Defendant | Panda Restaurant Group, Inc. (Panda Express) |
| Allegation | Failure to protect customer payment card and personal data from a 2024 data breach |
| Settlement Amount | $2.45 million |
| Maximum Per Person | Up to $5,000 for documented losses |
| Data Exposed | Payment card info, names, email addresses, personal data |
| Status | Settled |
By Steve Levine | Published: February 18, 2026
Legal Disclaimer
This article is for informational purposes only and does not constitute legal advice. OpenClassActions.org is not a law firm and does not represent any party in this litigation. If your personal or financial information was exposed in a data breach, consult with a qualified attorney to understand your rights. Settlement terms and claim deadlines are subject to change.