Home Depot Data Breach Settlement: Payout Status
Last updated: July 25, 2026
The Home Depot data breach settlement is a $19.5 million agreement that resolved consumer claims over the 2014 breach of Home Depot's self-checkout payment systems, which exposed roughly 56 million payment cards and about 53 million email addresses. It is closed. The claim deadline was October 29, 2016, Chief Judge Thomas W. Thrash Jr. of the Northern District of Georgia granted final approval on August 23, 2016, and payments were distributed to eligible claimants in 2017. There is nothing to file today, and no new Home Depot data breach claim window has opened since.
The consumer fund was made up of $13 million in cash plus $6.5 million to provide 18 months of free Identity Guard identity-monitoring. From the cash fund, a shopper who filed a valid claim could recover documented out-of-pocket losses and unreimbursed fraudulent charges up to a $10,000 cap, plus $15 per hour for time spent dealing with the breach (up to 5 hours with documentation). Because a payment required a filed claim by the 2016 deadline, no money is being issued in 2026. This settlement is separate from Home Depot's $27.25 million settlement with banks and its $17.5 million settlement with state attorneys general — neither of those paid individual shoppers.
Key facts
- Consumer settlement
- $19.5 million
- Cash fund
- $13 million
- Identity monitoring
- 18 months (Identity Guard)
- Out-of-pocket cap
- Up to $10,000 with proof
- Cards affected
- ~56 million
- Breach window
- Apr 10 – Sep 13, 2014
- Claim deadline
- Oct 29, 2016 (closed)
- Final approval
- August 23, 2016
- Case
- In re Home Depot, 1:14-md-02583-TWT (N.D. Ga.)
Official settlement administrator: HomeDepotBreachSettlement.com
Who qualifies
- You are a U.S. resident who used a credit or debit card at a U.S. Home Depot self-checkout between April 10, 2014 and September 13, 2014, or you received a notice that your data was compromised in the breach.
- You filed a valid claim before the October 29, 2016 deadline. That window is closed and no new claims are accepted.
- To recover cash you needed documented out-of-pocket losses, unreimbursed fraudulent charges, or documented time spent addressing the breach — class members with no documented losses received the free identity-monitoring benefit rather than a cash payment.
- This consumer settlement did not cover banks or credit unions (a separate $27.25 million settlement did) or state governments (a separate $17.5 million attorneys-general settlement did).
Home Depot settlement payout status — what happens now
- 1
The claim window closed in October 2016
The deadline to file was October 29, 2016. If you were eligible and did not file by then, you are not entitled to a payment. There is no way to submit a new claim in 2026 — the consumer settlement is fully closed and distributed.
- 2
The court approved the $19.5 million settlement in August 2016
Chief Judge Thomas W. Thrash Jr. of the U.S. District Court for the Northern District of Georgia granted final approval on August 23, 2016 in In re The Home Depot, Inc., Customer Data Security Breach Litigation. An objector's appeal was dismissed in late October 2016, clearing the way for distribution.
- 3
Cash was paid in 2017; identity monitoring has expired
The administrator issued payments from the $13 million cash fund in two distributions during 2017. Claimants recovered documented losses (up to $10,000) and $15/hour for documented time. The 18 months of free Identity Guard monitoring funded by the $6.5 million has long since expired.
- 4
Don't confuse this with the bank or state settlements
Home Depot also paid $27.25 million to financial institutions that reissued cards and $17.5 million to 46 states and D.C. in 2020. Neither of those funds pays individual shoppers — only the $13 million consumer cash fund did, and it is closed.
- 5
Watch out for fake 'Home Depot claim 2026' sites
The 2014 breach exposed roughly 53 million email addresses, and scammers still send fake 'breach payout' emails and run lead-generation pages inviting you to 'sign up' for a Home Depot claim. The real settlement is closed, never charged a fee, and never asked for your bank login or Social Security number by email.
- 6
Never miss the next data breach settlement — ClaimBee alerts you
Retail and payment-card breaches settle regularly, and the claim windows are short. ClaimBee scans 2,000+ cases, matches them to your profile, and tracks every deadline so you file the next one before it closes.
Missed this one? Don't miss the next.
ClaimBee matches your profile against 2,000+ active settlements, shows payout and proof requirements up front, and tracks every deadline for you.
Frequently asked questions
When will I get my Home Depot data breach settlement check?
If you filed a valid claim before the October 29, 2016 deadline, your payment was already sent — the administrator distributed the $13 million cash fund in 2017. The settlement is fully closed and distributed, so no new checks are being issued in 2026.
Can I still file a Home Depot data breach claim in 2026?
No. The claim deadline was October 29, 2016 and the consumer settlement is fully closed and paid out. There is no open Home Depot data breach claim window in 2026. Any website inviting you to sign up for a Home Depot data breach payout today is not the official settlement.
How much was the Home Depot data breach settlement payout?
The consumer fund was $19.5 million — $13 million in cash plus $6.5 million funding 18 months of free identity monitoring. Individual cash payments depended on your documented losses: up to $10,000 for out-of-pocket costs and unreimbursed fraud, plus $15 per hour for time spent (up to 5 documented hours). There was no flat per-person amount.
Who qualified for the Home Depot data breach settlement?
U.S. residents who used a credit or debit card at a U.S. Home Depot self-checkout between April 10, 2014 and September 13, 2014, or who were notified their information was compromised. About 56 million payment cards were exposed in the breach.
What was the Home Depot data breach?
Between April and September 2014, attackers used a third-party vendor's stolen credentials to install custom malware on Home Depot's self-checkout point-of-sale systems in U.S. and Canadian stores. The breach exposed roughly 56 million payment cards and about 53 million customer email addresses — one of the largest retail breaches on record at the time.
Is the Home Depot data breach settlement legit?
Yes. It was a real $19.5 million consumer settlement in In re The Home Depot, Inc., Customer Data Security Breach Litigation, No. 1:14-md-02583-TWT, approved August 23, 2016 by Chief Judge Thomas W. Thrash Jr. in the Northern District of Georgia. The official site was homedepotbreachsettlement.com. Payments went out in 2017 and it never charged a fee to participate.
Is there a new Home Depot settlement I can join?
Not for the 2014 data breach — that case is closed. Be aware that unrelated Home Depot matters occasionally make news (for example, a 2024 California settlement over self-checkout price-scanner overcharges), but those are separate cases with their own rules and are not the data breach settlement.
Related settlements
Closed · Data breach
Target Data Breach Settlement
~$40, or up to $10,000 with documented losses (paid) · Closed July 31, 2015
Closed · Data breach
Equifax 2017 Data Breach $700 Million Settlement
~$6.80–$20,000 (closed) · Closed Jan 22, 2024
Closed · Data breach
Capital One $190 Million Data Breach Settlement
Up to $25,000 + lost time · Closed Sept 30, 2022
Closed · Data breach
T-Mobile $350 Million Data Breach Settlement
$25 flat ($100 CA) / up to $25,000 · Closed Jan 23, 2023
Closed · Data breach
Sony PlayStation Network $15 Million Data Breach Settlement
Games, themes or 3 months of PS Plus · Closed August 31, 2015
More settlements people are checking
Payout status for other settlements we track, updated as administrators publish new information.