A class-action settlement with automotive-parts manufacturer KYB Americas is paying affected people up to $5,000 with documentation, or an estimated $75 flat payment with none, to resolve a data breach that exposed personal information beginning in February 2025. Claims must be submitted or postmarked by August 26, 2026, and either cash choice comes bundled with three years of credit monitoring. The decision that matters most before filing is which payment tier fits, followed closely by learning to tell the court-approved claim site from the impostor pages that reliably surface whenever a payout is announced.
What the KYB Americas breach exposed and who qualifies
The settlement resolves a lawsuit filed after a data-security incident the company disclosed in 2025. The breach, which began in February of that year, compromised personal data belonging to people connected to the company, and the class covers United States residents whose information was involved and who received notice of the incident. Eligibility does not depend on proving that the exposed data was later misused, only that a person falls within the defined group.
Settlements like this one follow a familiar arc, as the case summary from Johnson v. KYB Americas Corporation lays out. A company discovers unauthorized access to its systems, notifies the people affected as breach-notification laws require, and later resolves the resulting claims without admitting wrongdoing. A federal court still has to approve the terms; here, the judge has set a final-approval hearing for September 25, 2026, after the claim deadline passes.
The kind of data exposed in incidents like this typically includes names paired with sensitive identifiers, the combination that makes identity theft possible. Class members do not have to show that the stolen information ended up for sale or was used to open accounts. The settlement compensates the exposure itself, with the larger tiers reserved for those who can document that measurable harm actually followed from it.
Free retirement updates: Every year, billions in settlements and unclaimed money go unclaimed. The free Retirement Shield newsletter sends the real ones, with deadlines, a couple times a week. Get the free newsletter.
The $75 flat payment versus up to $5,000 with proof
The settlement offers two paths. One is documented reimbursement: up to $300 for ordinary out-of-pocket losses tied to the breach, up to $5,000 for extraordinary losses such as proven identity theft, and up to $100 for lost time, calculated at roughly $25 an hour for as many as four hours. Each of those requires supporting records, from bank statements to receipts to correspondence showing the loss and its connection to the breach.
The second path is the alternative flat payment, an estimated $75 in cash that requires no documentation at all. That option suits people who noticed no direct financial harm but were still part of the exposed group. A total cap of $250,000 governs the fund, which means payments can be reduced on a pro-rata basis if valid claims exceed the money available, so the headline figures are ceilings rather than guarantees of the exact amount a claimant will receive.
Choosing between the tiers comes down to records. A claimant who paid for credit monitoring, had fraudulent charges reversed, or lost income dealing with the fallout can often clear the ordinary-loss tier and, in serious cases, the extraordinary-loss tier, provided the paperwork ties each cost to the breach. Without those records, the flat payment is the cleaner route, since it does not require estimating, itemizing, or proving anything beyond membership in the class.
The three years of credit monitoring bundled with either option carry their own value. Purchased on the open market, comparable monitoring runs well over a hundred dollars a year, so for a claimant with no direct losses the monitoring can outweigh the flat cash. That is especially true for older adults, who are frequent targets of the identity theft that a breach like this one can set in motion months or years later.
How to file by August 26 and avoid the impostor-claim scam
Claims are filed through the official settlement website, and the safest move is to reach it directly rather than through a link in an unsolicited email or text. Scammers routinely spin up look-alike pages and send messages that mimic settlement administrators, then harvest Social Security numbers, bank logins, or a small upfront fee from people who believe they are claiming money they are owed.
A legitimate class-action administrator never charges to file a claim and never demands a gift card, cryptocurrency, or a wire transfer to release a payment. The Federal Trade Commission’s guidance on impostor scams describes the same tells that apply here: manufactured urgency, a request for payment in order to get paid, and a channel the recipient did not initiate. Any message adding those pressures to a real settlement is the fraud, not the settlement.
For most people in the class, the practical question is narrow. Anyone with records showing the breach cost them money should weigh the documented tiers, which can reach thousands of dollars for genuine identity-theft losses; everyone else can take the flat payment with a few minutes of filing. Either way, the August 26 deadline is the hard edge, and the credit monitoring that comes with a valid claim can be worth more than the cash to a household that has not yet frozen its credit.
This article was produced with AI assistance and reviewed against primary sources by The Money Overview editorial team.
More Financial Reading
