Scrubs & Beyond and Kindthread Reach $2,500 Data Breach Settlement Following June 2024 Cyberattack 301 Scrubs Investors LLC, operating as Scrubs & Beyond and Kindthread, has agreed to settle a class action lawsuit stemming from a June 2024 cyberattack that exposed sensitive personal data. The breach compromised files containing names, Social Security numbers, dates of birth, and employee identification numbers of affected individuals. Who is eligible? U.S. residents who received a notice confirming their data was implicated in the breach may qualify as class members. Claims must be submitted by May 18, 2026, with payments processed approximately 90 days after final court approval on June 2, 2026. Settlement benefits include: - Up to $2,500 for documented out-of-pocket losses (e.g., identity theft, credit freeze fees, ID replacement costs) incurred between June 6, 2024, and May 18, 2026. - A one-time $50 cash payment for those without documented losses. - Two years of credit monitoring via CyEx Identity Defense Complete, including $1 million in identity theft insurance and fraud resolution support. Claim process: Eligible individuals must submit a claim online or by mail using their unique ID and PIN from the settlement notice. Documented losses require supporting evidence, such as receipts or bank statements. Payouts will be issued via PayPal, Venmo, Zelle, or paper check. Fund allocation: The settlement covers administration costs, up to $250,000 in attorneys’ fees, $2,500 service awards for class representatives, and payments to approved claimants. The total payout depends on the number and type of claims filed. Background: The lawsuit alleged 301 Scrubs Investors failed to adequately protect sensitive data, though the company denied wrongdoing and settled to avoid prolonged litigation. The breach impacted 301 individuals, with notices sent to affected parties. The final approval hearing is scheduled for June 2, 2026.

On July 21, 2023, the Vermont Office of the Attorney General reported a data breach involving Scrubs & Beyond. The breach, which occurred between April 7, 2023, and April 12, 2023, involved potential unauthorized access to a portion of Scrubs & Beyond’s network, potentially affecting an undisclosed number of individuals and possibly compromising personal information.