Few car buyers have ever heard of 700Credit, but the company operates quietly behind the scenes at thousands of auto, RV, and marine dealerships, running the credit checks that decide whether a sale goes through. A data breach at that company in October 2025 exposed information on roughly 5.8 million dealership customers, and a $17.5 million settlement now lets those affected file for a payment. The claim deadline is September 22, 2026, ahead of a court hearing in October.
The 700Credit breach that hit auto dealerships
700Credit provides credit-reporting and identity-verification tools to dealerships, which means its systems hold personal and financial details on people who applied for vehicle financing. The breach stemmed from compromised login credentials tied to the company’s 700Dealer.com application, giving an unauthorized party access to consumer records. Because the data flowed through the dealership channel, many affected consumers may not connect the notice they received to the company that actually held their information.
The exposure reached an estimated 5.8 million people, according to reporting on the case by ClassAction.org, and the resulting lawsuit alleged the company failed to safeguard the information. The $17.5 million settlement resolves those claims and covers United States residents who received a breach notification, most of which went out around July 2026.
Breaches that originate with a back-office vendor tend to have an outsized reach for this reason. A dealership routinely shares a buyer’s financing application with 700Credit as part of closing a sale, so the shopper’s most sensitive identifiers end up in a system they never interacted with directly and could not name afterward. When the login credentials to that system are compromised, the exposure spans the customers of many separate dealerships at once, which is how a single intrusion tied to one application reached an estimated 5.8 million people spread across the country.
Free retirement updates: Every year, billions in settlements and unclaimed money go unclaimed. Our free Retirement Shield newsletter sends the real ones — with deadlines — a couple times a week. Get the free newsletter.
A flat $50 or up to $2,500 for documented losses
The settlement gives claimants two options, laid out on the official 700Credit data breach settlement site. The first is an estimated flat payment of about $50, which requires no documentation. The second reimburses up to $2,500 for out-of-pocket losses that can be traced to the breach, such as fraudulent charges or the cost of resolving identity theft, but only with supporting records to back the amount claimed.
Claimants who select either option also receive two years of free credit monitoring once the settlement is finalized. For those weighing whether to pursue the larger documented claim, the FTC’s IdentityTheft.gov explains how to identify and document breach-related losses, the same kind of evidence the settlement requires for any payment above the flat amount.
The gap between the two payment tiers reflects the two kinds of harm a data breach causes. Most people face only the abstract risk that exposed data could be misused at some later point, which the flat payment and two years of monitoring are meant to address. A smaller group can point to concrete costs already incurred, such as unauthorized charges or fees paid to freeze and repair their credit, and it is that group the up-to-$2,500 tier is designed for. Selecting the larger tier without records to support it risks having the claim cut back to the flat amount.
September 22 to file, October 7 for approval
Two dates matter, and they are easy to conflate. The deadline to file a claim is September 22, 2026, and it remains open. A separate final approval hearing is set for October 7, 2026, when the court will decide whether to approve the settlement and authorize payments. Consumers who want out of the deal entirely, in order to preserve the right to sue on their own, must opt out by September 8, 2026.
The distinction matters because the October hearing is not a second chance to file. Claims must be submitted by September 22; the October date governs approval and the eventual release of funds, which typically follows the hearing and any appeals. A claimant who files on time still waits until after approval to see a payment.
The opt-out date is the one that forecloses future options. A consumer who does nothing is bound by the settlement and gives up the right to sue over the breach, whether or not they ever file a claim; only those who formally opt out by September 8 keep that right intact. Objecting to the terms is a separate step for those who want to stay in the class but challenge how it is structured. For the large majority who were notified but have seen no fraud, filing the flat claim by September 22 is the simplest way to collect.
The breach shows how a routine step in buying a car can route a shopper’s Social Security number and financial details through a vendor they never chose and cannot easily identify afterward. For the millions notified, the path is straightforward: decide between the flat payment and a documented claim, and file on the settlement site before September 22. That administrator’s page remains the authoritative source for eligibility and the October approval timeline.
This article was produced with AI assistance and reviewed against primary sources by The Money Overview editorial team.
More Financial Reading
