Documented Losses: The Settlement Claim Most People Skip

Data breach documented losses are the most valuable and least claimed part of most settlements. Where a flat payment compensates the general fact that your information was exposed, this reimburses what the breach actually cost you, and the cap is usually far higher.

What Counts as Data Breach Documented Losses

Data breach documented losses are money you spent or lost because of the breach. Fraudulent charges you were not reimbursed for. Fees to place or lift a credit freeze. Credit monitoring you bought yourself after the breach. Costs of replacing documents.

Professional fees count too, including accountants or lawyers engaged to sort out consequences, and costs of correcting a fraudulent tax filing.

Most settlements also allow time. Hours spent on the phone with banks and bureaus are typically reimbursed at a set hourly rate up to a limit.

The Documentation That Works

Bank and card statements showing the charges. Receipts and invoices for anything you bought or paid for. Correspondence with banks, bureaus or the company itself. Police or FTC identity theft reports if you filed one.

For time claims, many settlements accept a signed statement describing what you did and how long it took, without receipts. Specificity is what makes those credible: dates, who you contacted, what it concerned.

Redact what is not needed. Administrators do not require full account numbers to verify a charge.

The Causation Requirement

Claims for data breach documented losses generally require a plausible connection between the breach and the loss. Timing does most of that work: fraud shortly after the breach, on an account whose details were exposed.

This is where claims are most often reduced. A loss with no apparent relationship to the breached data is likely to be rejected, which is reasonable.

Claim what you can support. Forms are signed under penalty of perjury, and audited claims that are inflated get cut rather than paid.

Why So Few People Claim Documented Losses

Because it is work, and because people do not realise the option exists. The flat payment is the obvious box; the documented-loss section is longer and needs attachments.

Since these claims are rarer, they are also less affected by dilution across millions of claimants. If you have records, the effort is disproportionately worthwhile.

Keeping Records Before You Need Them

The people who claim data breach documented losses successfully are usually the ones who kept notes at the time, not the ones who reconstructed events a year later from memory.

If you are dealing with fraud now, keep a simple log as you go: the date, who you contacted, what it concerned and roughly how long it took. It costs nothing while it is happening and is difficult to recreate afterwards.

Frequently Asked Questions

What can I claim as a documented loss?

Unreimbursed fraudulent charges, freeze fees, monitoring you purchased, document replacement, professional fees, and usually time spent, at a set rate.

Do I need receipts for time?

Usually not. A specific signed statement is commonly accepted, though the settlement’s own rules govern.

What if my bank already refunded the fraud?

Then that amount is not a loss to you and should not be claimed. Related costs you were not reimbursed for still can be.

How do I prove the breach caused it?

Timing and the type of data involved are the usual basis. Fraud occurring shortly after a breach on an exposed account is the straightforward case.

Where Data breach documented losses Fits in the Bigger Picture

Data breaches have become routine, and the consumer side of them has not kept pace.
Notices arrive months after the event, settlement notices arrive years later, and the
information that would let somebody decide what to do is scattered between legal notices,
regulator pages and marketing dressed up as advice.

Understanding data breach documented losses is part of a small set of decisions that recur every time it
happens: whether you were affected, what kind of data was involved, whether to freeze your
credit, and if a settlement follows, whether to claim, opt out or ignore it.

None of those decisions is urgent in the way scam messages imply, and all of them are
easier when made from the official notice rather than from a search result. A legitimate settlement administrator never asks you to pay to file a claim, and never contacts you first to request your Social Security number by phone or email. Use only the settlement website named in the official notice you received.

Where a breach has become litigation, our class action pages track the
cases themselves, including which are active and what stage they have reached.

Official Resources

• IdentityTheft.gov (FTC) — the official recovery plan tool and report
• AnnualCreditReport.com — the only federally authorised source of free credit reports
• FTC consumer guidance on identity theft — plain-language guidance and next steps
• IRS identity theft and fraud — the separate process for tax-related identity theft

Related Guides

• All Data Breach Guides
• Current Class Action Cases
• Settlement News
• How to Spot a Fake Settlement Claim Site
• Was My Data Breached? How to Check
• Cash or Credit Monitoring: Which to Claim
• Am I a Class Member?
• What a Claim Form Asks For
• How Long Settlements Take to Pay

Legal disclaimer. This page is general information about how data breach claims and settlements work. It is not legal advice and does not create an attorney-client relationship. Settlement terms, deadlines and eligibility differ in every case and change over time, so rely on the official notice and the settlement website named in it rather than on any general guide.

For advice about your own situation, consult a lawyer licensed in your state. A legitimate settlement administrator never asks you to pay to file a claim, and never contacts you first to request your Social Security number by phone or email. Use only the settlement website named in the official notice you received.