Millions of CVS Pharmacy customers may be eligible for part of a $20.5 million class action settlement the chain has agreed to pay over claims it unlawfully shared consumer data with third parties.
In a complaint, multiple plaintiffs alleged user data from CVS digital properties was sold to advertising technology company Criteo in violation of the Federal Wiretap Act, the California Invasion of Privacy Act and other statutes.
CVS digital privacy settlement at a glance:
- Settlement amount: $20.5 million
- Claim deadline: Nov. 16, 2026.
- Estimated payment: $5 to $10
- Final approval hearing: Dec. 1, 2026
CVS, which has more than 36 million customers nationwide, has not admitted any wrongdoing in the case. In a statement to CNBC Select, the company said it stands by its privacy practices and agreed to resolve the matter “to avoid the expense and distraction of prolonged litigation.”
See if you’re eligible for payment in the CVS settlement, how much you could receive and how to keep your data out of unwanted hands.
Who is eligible for payment in the CVS settlement?
According to the settlement website, any U.S. resident who accessed CVS digital properties prior to July 27, 2026, may be eligible for a payout.
CVS digital properties include:
- The CVS website (CVS.com) and CVS app
- CVS Health website (CVSHealth.com)
How much money can I get from the CVS digital privacy settlement?
You could be eligible for a payment of up to $10 if you can provide documentation that you are a settlement class member, such as email receipts or browser history records. Without documentation, you may be eligible for a $5 payment.
The final amount is subject to deductions for attorneys’ fees and other costs.Payment may be issued via PayPal, Venmo, Zelle, or paper check.
How do I file a claim in the CVS digital privacy settlement?
Eligible class members must submit a claim online or by mail by 11:59 p.m. ET on Nov. 16, 2026.
Claim forms can be submitted online here, or you can download the form and mail it to the settlement administrator at:
CVS Digital Privacy Settlement
c/o Settlement Administrator
P.O. Box 1110
Costa Mesa, CA 92628
If you don’t want to be part of the settlement or want to reserve your right to sue CVS independently, you’ll need to submit a written notice by Nov. 1, 2026.
When will I receive payment from the CVS settlement?
The final approval hearing is scheduled for Dec. 1, 2026. If the court approves the settlement, cash payments will be issued 120 days after final approval.
Any appeals may slow down the process, however.
How to remove your data from the internet
Data brokers and other companies collect demographic information, Social Security numbers, driver’s licenses, browsing histories, biometrics and employment and education records, among other records.
By law, data brokers must remove your information upon request. You can do it yourself for free, but finding the right page, submitting a request and verifying it was completed can be tedious and confusing.
Data removal companies like DeleteMe and Incogni advertise that they can remove your personal identifying information (PII) from data brokers’ files, reducing the odds that your identity will be compromised.
DeleteMe
UFB Portfolio Savings offered by Axos Bank®, a Member FDIC.
-
Product description
The original personal data removal service, Abine DeleteMe removes your info from data broker sites using both automation and human agents. Its streamlined process is ideal for hands-off users
-
Reach
Opts users out of more than 750 data broker sites
-
Pricing
$129.00/year for one person, $229.00/year for two people, $329/year for four-person family plan. Business plans available, as well. Full refund before your first privacy report, then pro-rated based on unused time on subscription.
Incogni
-
Product description
Incogni offers four affordable subscriptions, including two family plans with up to five members. Users can submit three addresses, phone numbers and email addresses.
-
Reach
Opts users out of more than 420 public and private data brokers. Advance plans add unlimited number of custom removal requests
-
Pricing
$15.98/month ($95.88/year) for Standard plan, $29.98/month ($179.88/year) for Unlimited plan, $31.98/month ($191.88/year) for a Family plan, $45.98/month $275.88/year for Family Unlimited plan.
These platforms can’t delete social media or public records (like deeds or bankruptcy filings) and they can’t affect what’s on the dark web.
How to protect your personal data
Most strategies focus on responding to identity theft after the fact, but there are some preventative measures you can take. Be mindful of what you share on social media, think carefully before opening email links or attachments and avoid public Wi-Fi if you’re shopping or banking online.
Take action to protect your identity
Offers in this section are from affiliate partners and selected based on a combination of engagement, product relevance, compensation, and consistent availability.
Plans from $10 to $32 per month, billed annually
Protects against identity theft, fraud, spam calls and websites, viruses and malware. Offers three-credit-bureau monitoring, VPN, dark web monitoring, password manager, email aliases and instant credit lock.
Other useful tips include:
1. Follow alerts about cybersecurity incidents. If you are a customer of a targeted business, search online for details about the incident and contact the company directly for more information. Read any alerts you receive carefully and monitor your credit card statements for unusual transactions.
2. Check your credit reports. It can take a long time for an incident to be reported. The first AT&T breach took place in 2019, for example, but wasn’t confirmed by the company until 2024. Review your credit reports for signs of suspicious activity.
- Your credit card company or bank should provide updated credit score information for free.
- You can get free copies of your reports from each of the three major bureaus at AnnualCreditReport.com.
- You can get a free credit report from Experian® every 30 days and CreditWise from Capital One provides free access to your TransUnion credit report. Equifax offers two free credit reports per year with myEquifax.
- For regular updates on all three reports, consider subscribing to a paid identity theft protection service like PrivacyGuard® or Experian IdentityWorks℠*.
PrivacyGuard®
-
Cost
$9.99 to $24.99 per month
-
Credit bureaus monitored
Experian, Equifax and TransUnion
-
Credit scoring model used
-
Dark web scan
Yes, for Identity and Total Protection plans
-
Identity insurance
Yes, up to $1 millionfor Identity and Total Protection plans
Experian IdentityWorks℠
-
Cost
Basic: Free; Premium: 7-day trial, after $24.99 per month; Family: 7-day trial, after $34.99 per month
-
Credit bureaus monitored
1-bureau credit monitoring, alerts and reports: Experian, with Basic plan only and 3-bureau credit monitoring, alerts and reports: Experian, Equifax and TransUnion®, with Premium and Family plans only
-
Credit scoring model used
FICO® Score 8, with all plans
-
Dark web scan
-
Identity theft insurance
Yes, up to $1 million with all plans
*Identity Theft Insurance underwritten by insurance company subsidiaries or affiliates of American International Group, Inc. (AIG). The description herein is a summary and intended for informational purposes only and does not include all terms, conditions and exclusions of the policies described. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.
3. Get a password manager. Password managers store your usernames, passwords and email addresses. Services like Keeper and Dashlane add dark web monitoring, email masking and other benefits.
Keeper
-
Cost
Keeper Free: $0; Keeper Personal Plan: $1.79 per user per month; Keeper Family Plan: $3.83 per month; Business Starter Plan: $7.00 per month.
-
Standout features
Allows importing from other password managers, adjusts auto-fill preferences for individual websites and allows for one-time password sharing
-
Offers free version
-
Availability
Available for web, desktop, and mobile devices.
-
Security features
Keeper uses a zero-knowledge approach, government-standard AES-256 encryption, supports multi-factor authentication and biometrics, and performs quarterly third-party security penetration testing
Pros
- Helps you securely share passwords and files
- Offers unlimited password storage
- Supports fingerprint and Face ID login
- Password strength report
Cons
- Free version is limited to one mobile device
- Less intuitive Interface
- Dark web monitoring and file storage are only available on paid plans
Dashlane
-
Cost
Premium: $5.42 per month; Friends & Family: $8.13 per month; Business: $8.00 per month; All prices are per month with annual billing selected.
-
Standout features
The premium plan provides access to VPN, password health checker and dark web monitoring and users can securely store sensitive documents.
-
Free version
-
Availability
Available for web and mobile devices.
-
Security features
Dashlane uses a zero-knowledge approach, government-standard AES-256 encryption and multi-factor authentication. Dashlane supports biometrics and has passed third-party security audits.
Pros
- VPN comes with the basic subscription
- Dark web monitoring
- Real-time scam protection
- Password manager has a 14-day free trial.
Cons
- No free tier
- More expensive than some competitors
- Lacks desktop app
- Annual billing only
4. Freeze your credit. Even if you’re not part of a recent data breach or digital privacy case, freezing your credit reports prevents anyone from opening a new account in your name. It doesn’t affect your credit score and you can unfreeze your accounts whenever you want.
Aura
-
Cost
Kids: $13 per month or $10 per month billed annually; Individual: $15 per month or $12 per month billed annually; Couple: $29 per month or $22 per month billed annually; Family: $50 per month or $32 per month billed annually
-
Standout features
Protects against identity theft, fraud, spam calls and websites, viruses and malware. Offers three credit bureau monitoring, VPN, dark web monitoring, password manager, email aliases and instant credit lock.
-
Identity theft insurance
All plans include at least $1 million and white-glove fraud remediation
Pros
- 14-day free trial
- Family plan includes up to 5 adults and an unlimited number of kids
- Discount if you buy an annual plan
- Up to $1 million to cover losses or expenses related to identity theft
Cons
- Doesn’t monitor social media accounts
- Annual plans can only be canceled in the first 60 days for a money-back guarantee
Identity monitoring service Aura can freeze your credit without requiring you to contact the credit bureaus. It also offers a range of other security features, including a password generator, email aliases, a VPN, robocall filters and malware protection.
5. Make sure your anti-virus protection is up to date. More than 300,000 new types of malicious software are discovered daily, according to IT security research institute AV-TEST. Antivirus software like Bitdefender Antivirus Plus and Norton AntiVirus Plus can help protect your devices from a variety of threats.
Bitdefender Antivirus Plus
-
Cost
Costs may vary depending on the plan selected – click “Learn More” for details
-
Standout features
Bitdefender Antivirus Plus offers a strong suite of security tools including access to a VPN. It includes an anti-tracking extension, a online banking browser, and a vulnerability assessment for unseen security issues.
-
Offers free version
-
Availability
-
Security features
Bitdefender Antivirus Plus offers real-time data protection, network threat prevention, phishing and fraud protection, web attack prevention and more.
Pros
- Network threat prevention
- Multi-layer ransomware protection
- banking browser
- VPN Included
- Anti-phishing protection
- 30-day free trial
Cons
- VPN data usage is very limited
- Slight performance decrease when launching applications
Norton™ Antivirus Plus
-
Cost
Plans start at $5.00 per month for one device ($60 per year)
-
All prices are per month with annual billing selected
-
Standout features
Norton Antivirus Plus offers protection from malware and ransomware, access to cloud backup storage, a password manager and a 100% Virus Protection Promise.
-
Offers free version
-
Availability
Available for Windows, Mac, Android and iOS.
-
Security features
Ransomware and malware protection, cloud backup, phishing prevention and access to a password manager and their smart firewall.
Pros
- Includes a password manager
- Detects scams in texts and deepfake videos
- Cloud backup available
- Excellent performance test results
- 100% virus protection promise
- Provides real-time tips to spot scams
Cons
- Slightly higher number of false positives than some other options
- Base option only protects a single device
- A bit pricier than some competitors
FAQs
Who can file a claim in the CVS digital privacy settlement?
Anyone who accessed the CVS or CVS Health website or used the CVS app before July 27, 2026, may qualify as a class member.
When is the deadline to file a claim in the CVS settlement?
Claim forms must be submitted by Nov. 16, 2026. If you wish to object to or opt out of the settlement, the deadline is Nov. 1, 2026.
How much money can I get from the CVS settlement?
You may be due up to $10 if you can provide documentation that you are an eligible class member. Class members who cannot provide documentation are eligible to receive up to $5.
Subscribe to the CNBC Select Newsletter!
The CNBC Select Recommends newsletter delivers practical money tips each week along with expert-picked financial product recommendations. Sign up here.
Why trust CNBC Select?
At CNBC Select, our mission is to provide our readers with high-quality service journalism and comprehensive consumer advice so they can make informed financial decisions. Every cybersecurity article is based on rigorous reporting by our team of expert writers and editors. While CNBC Select earns a commission from affiliate partners on many offers and links, we create all our content without input from our commercial team or any outside third parties, and we pride ourselves on our journalistic standards and ethics.
Catch up on CNBC Select’s in-depth coverage ofcredit cards,bankingandmoney, and follow us onTikTok,Facebook,InstagramandTwitterto stay up to date.
* IMPORTANT INFORMATIONA credit card is required to start your free 30-day trial membership *† in Experian IdentityWorksSM <
Editorial Note: Opinions, analyses, reviews or recommendations expressed in this article are those of the Select editorial staff’s alone, and have not been reviewed, approved or otherwise endorsed by any third party.
About The Author
