FTC: Chegg, data security data breach case

US Federal Trade Commission · decided Oct 31, 2022 · Settled

The FTC alleged Chegg's careless security led to four breaches since 2017 exposing data of millions of students and employees.

The case

Against: Chegg, Inc.
Regulator: US Federal Trade Commission
Decided: Oct 31, 2022
Status: SettledOrder finalized January 2023.
Outcome: Chegg must strengthen its data security, limit data collection and offer multifactor authentication.

History

1 dated entry

Date	Entry	Type	Source
Oct 31, 2022	Decision: FTC: Chegg, data security	Decision	Link

When	Case	Kind	Status	Filed
Dec 11, 2025Filed 9mo agofiled	ICO fine: LastPass, 2022 breachDecidedData breachUK Information Commissioner's OfficeGBP 1.2 million	Data breach	Decided	Dec 11, 2025
Sep 15, 2025Filed 12mo agofiled	FTC: Chegg, subscription cancellationSettledConsumer protectionUS Federal Trade Commission$7.5 million	Consumer protection	Settled	Sep 15, 2025
Aug 13, 2025Filed 13mo agofiled	In re Coinbase Customer Data Security Breach LitigationActiveData breachS.D. N.Y.	Data breach	Active	Aug 13, 2025
Jun 17, 2025Filed 15mo agofiled	ICO fine: 23andMe, genetic data breachDecidedData breachUK Information Commissioner's OfficeGBP 2.31 million	Data breach	Decided	Jun 17, 2025
Apr 8, 2025Filed 18mo agofiled	In re PowerSchool Customer Data Security Breach LitigationActiveData breachS.D. Cal.	Data breach	Active	Apr 8, 2025
Feb 24, 2025Filed 19mo agofiled	Chegg v. GoogleActiveAntitrustD.D.C.	Antitrust	Active	Feb 24, 2025
Jan 15, 2025Filed 20mo agofiled	FTC: GoDaddy, hosting securitySettledData breachUS Federal Trade Commission	Data breach	Settled	Jan 15, 2025
Dec 17, 2024Filed 21mo agofiled	DPC fine: Meta, 2018 Facebook breachDecidedData breachIrish DPCEUR 251 million	Data breach	Decided	Dec 17, 2024

Caption and links

In the Matter of Chegg, Inc.

Lawsuit updates by email

Tuesdays, only in weeks with rulings, filings or hearings in data and AI cases.