Data and AI in court

Active cases433Dates ahead9

433 active cases · 9 dates ahead

Data breach cases

Class actions and regulator actions after a breach or leak of personal data.

Calendar
Apple Calendar or OutlookGoogle CalendarDownload .ics
Data breachDecidedfiled Dec 2025ICO fine: LastPass, 2022 breachThe ICO found weak security let a hacker who compromised employee laptops in August 2022 reach a backup database holding data of up to 1.6 million UK users.GBP 1.2 millionUK Information Commissioner's OfficeData breachActivefiled Aug 2025In re Coinbase Customer Data Security Breach LitigationConsolidated suits over the 2025 incident in which bribed overseas support agents leaked Coinbase customer data used in social engineering scams.S.D. N.Y.Data breachDecidedfiled Jun 2025ICO fine: 23andMe, genetic data breachJoint ICO and Canadian privacy commissioner investigation into the 2023 credential stuffing attack that exposed data of 155,592 UK residents; the ICO found security measures were inadequate.GBP 2.31 millionUK Information Commissioner's OfficeData breachActivefiled Apr 2025In re PowerSchool Customer Data Security Breach LitigationConsolidated suits over the December 2024 breach of PowerSchool's student information system that exposed data of students and teachers across many school districts.S.D. Cal.Data breachSettledfiled Jan 2025FTC: GoDaddy, hosting securityThe FTC alleged that since 2018 GoDaddy failed to use reasonable security for its web hosting services, leading to breaches, while claiming strong protection.US Federal Trade CommissionData breachDecidedfiled Dec 2024DPC fine: Meta, 2018 Facebook breachTwo inquiries into a September 2018 Facebook data breach that affected about 29 million accounts worldwide, around 3 million in the EU/EEA, covering breach notification and data protection by design.EUR 251 millionIrish DPCData breachSettledfiled Oct 2024FTC: Marriott and Starwood, data breachesThe FTC alleged lax security led to three breaches from 2014 to 2020 affecting more than 344 million customers worldwide.US Federal Trade CommissionData breachActivefiled Oct 2024In re Snowflake Data Security Breach LitigationConsolidated suits over the 2024 theft of customer data from Snowflake cloud accounts lacking multifactor authentication, affecting customers including AT&T, Ticketmaster and Advance Auto Parts.D. Mont.Data breachDecidedfiled Sep 2024DPC fine: Meta, plaintext passwordsInquiry launched in April 2019 after Meta notified the DPC that it had stored some social media users' passwords in plaintext on internal systems.EUR 91 millionIrish DPCData breachActivefiled Jun 2024Leal sued v. Snowflake, Inc.On June 13, 2024, a class action was filed in the United States District Court for the District of Montana against us alleging that we failed to take reasonable measures to secure systems that contained consumer data, thereby allowing threat actors to access…D. Mont.Data breachActivefiled Jun 2024In re Change Healthcare Customer Data Security Breach LitigationConsolidated suits over the February 2024 ransomware attack on UnitedHealth's Change Healthcare that exposed health data of about 190 million people and disrupted claims processing.D. Minn.Data breachSettledfiled Jun 2024In re AT&T Customer Data Security Breach LitigationConsolidated class actions over two 2024 incidents: customer data posted on the dark web and call and text records stolen from AT&T's Snowflake workspace.$177 millionN.D. Tex.Data breachActivefiled Apr 2024In re 23andMe Customer Data Security Breach LitigationConsolidated suits over the 2023 credential stuffing attack that exposed ancestry and profile data of about 6.9 million 23andMe users.N.D. Cal.Data breachSettledfiled Feb 2024FTC: Blackbaud, ransomware breachThe FTC alleged Blackbaud's lax security let a hacker access data on millions of consumers, including Social Security and bank account numbers, and that it delayed notifying customers.US Federal Trade CommissionData breachActivefiled Oct 2023In re MOVEit Customer Data Security Breach LitigationHundreds of suits against Progress Software and organizations that used its MOVEit file transfer tool after the Cl0p gang exploited a zero-day flaw in 2023.D. Mass.Data breachActivefiled Jun 2023In re T-Mobile 2022 Customer Data Security Breach LitigationConsolidated suits over the T-Mobile data breach disclosed in January 2023 that exposed data of about 37 million accounts.W.D. Mo.Data breachSettledfiled Oct 2022FTC: Chegg, data securityThe FTC alleged Chegg's careless security led to four breaches since 2017 exposing data of millions of students and employees.US Federal Trade CommissionData breachSettledfiled Oct 2022FTC: Drizly and CEO, data securityThe FTC alleged security failures at the Uber-owned alcohol delivery service led to a breach exposing data of about 2.5 million consumers.US Federal Trade CommissionData breachSettledfiled Dec 2021In re T-Mobile Customer Data Security Breach Litigation (2021)Consolidated suits over the 2021 cyberattack that exposed personal data of about 76 million people.$350 millionW.D. Mo.Data breachDecidedfiled Dec 2020DPC fine: Twitter, breach notificationInvestigation, begun in January 2019, found Twitter notified a breach late and failed to document it adequately.EUR 450,000Irish DPCData breachSettledfiled Oct 2019In re Capital One Consumer Data Security Breach LitigationConsolidated suits over the 2019 breach in which a former AWS engineer accessed data of about 106 million Capital One customers and applicants.$190 millionE.D. Va.Data breachSettledfiled Jul 2019FTC sued v. Equifax (2017 data breach)Settlement over the 2017 Equifax breach that exposed personal data of about 147 million people.$575 million to $700 millionN.D. Ga.Data breachActivefiled Feb 2019In re Marriott International Customer Data Security Breach LitigationConsolidated suits over the Starwood guest reservation database breach disclosed in 2018 that exposed data of up to 383 million guest records.D. Md.Data breachSettledfiled Dec 2017In re Equifax Customer Data Security Breach LitigationConsolidated consumer suits over the 2017 Equifax breach that exposed Social Security numbers and other data of about 147 million people.$380.5 millionN.D. Ga.