This collection uses the privacy lawsuit classification recorded for each case. Compare the data practices, services, and affected groups described in the linked reporting. A privacy allegation and a confirmed data breach are different events; consult each case’s sources for what is reported.
A class-action lawsuit alleged that AT&T customers were affected by two 2024 data breaches involving call and text data and other account information. A judge granted final approval of a $177 million settlement; payments remain pending the appeals deadline and review of claim forms.
Source: AT&T Data Breach Class-Action SettlementJose Ortiz and Javier Hernandez alleged that Foris DAX, which operates the Crypto.com platform, continued third-party tracking after visitors selected “Disable All” on the cookie consent banner, allegedly violating privacy laws including the California Invasion of Privacy Act. The proposed class action was dismissed on October 7, 2026, after the court ruled that the plaintiffs had not shown a concrete injury sufficient for Article III standing.
Source: Crypto.com Cookie Tracking Privacy Class ActionMost recently updated first. Open a case for all participation details and public sources.
AT&T · Telecommunications customer accounts, call logs, and text data
A class-action lawsuit alleged that AT&T customers were affected by two 2024 data breaches involving call and text data and other account information. A judge granted final approval of a $177 million settlement; payment…
$177,000,000
Foris DAX · Crypto.com website and cookie-tracking practices
Jose Ortiz and Javier Hernandez alleged that Foris DAX, which operates the Crypto.com platform, continued third-party tracking after visitors selected “Disable All” on the cookie consent banner, allegedly violating priv…
Block · Cash App
A class action alleged that Cash App and Block failed to protect users after a former Cash App Investing employee accessed account data without permission in 2022 and an unauthorized user accessed certain accounts in 20…
$2,500.00
CVS Pharmacy and Criteo · CVS website, CVS Health website, and CVS app
Multiple plaintiffs alleged that CVS Pharmacy unlawfully shared customers' consumer data with third parties. CVS Pharmacy has agreed to pay a $20.5 million class-action settlement, establishing the matter as settled.
$10.00
Flock Safety and Columbine Valley Police Department · Flock license plate cameras and surveillance technology
A woman filed a federal civil rights class action alleging that Columbine Valley police used Flock cameras to surveil her movements and unconstitutionally track her after she was accused of stealing a package. The lawsu…
Flock Safety · Automated license plate reader network
A Georgia woman filed a proposed federal class action against Flock Safety, alleging that its nationwide automated license plate reader network violates drivers’ privacy rights by capturing and storing information about…
Anthropic · Claude chatbot identity-verification process
Illinois resident Jose Enrique Ortiz Colon filed a putative class-action lawsuit against Anthropic, alleging that Claude required users to submit government identification and live facial images for identity verificatio…
Flo · Flo menstrual cycle tracking and fertility app
United States residents who used the Flo mobile app and entered menstruation and/or pregnancy information into the app between November 1, 2016, and February 28, 2019. Claimants residing in California during that period…
$59,500,000
Flo and Google · Flo fertility tracking app
All individuals in the United States who downloaded and used the Flo App between November 1, 2016, and February 28, 2019, and entered menstruation and/or pregnancy data into the app during that timeframe.
$59,500,000
Meta · Flo fertility tracking app
Users of the Flo fertility tracking app alleged that their private health data was shared with Meta and used for targeted advertising. The claims proceeded to a jury trial resulting in a verdict against Meta; damages ha…
$59,500,000
Laboratory Corporation of America · Labcorp patient personal and health information handled by a medical debt collector
The related class action concerns the exposure of personal and health information belonging to Labcorp patients in the 2019 data breach at its debt collector, American Medical Collection Agency. Labcorp has agreed to a…
$35,000,000
Dartmouth College · College information systems and data security
All living United States residents who were sent notice by Dartmouth in November 2025 stating that their private information may have been impacted or accessed during the Oracle E-Business Suite cybersecurity incident.
$750,000
Facebook · Facebook
The class action alleged that Facebook shared users’ private data with third parties, including Cambridge Analytica, without adequate consent. The matter reached a $725 million settlement, and payments are being distrib…
$725,000,000
General Motors · Driver-data collection and sharing practices
More than 25 class action lawsuits allege that General Motors violated privacy laws by collecting and selling driver data to data brokers, which allegedly sold the data to insurance companies. The lawsuits were filed ag…
Union Pacific · Fingerprint scanning for truck-driver access to Union Pacific rail yards
Truck drivers allege that Union Pacific required them to scan their fingerprints when entering its rail yards without obtaining authorization or providing disclosures required by the Illinois Biometric Information Priva…
Lenovo · Lenovo website
A class-action lawsuit filed in the U.S. District Court for the Northern District of California alleges that Lenovo transferred American consumer data to its Chinese parent company through tracking technologies on its w…
Meta · Meta glasses and customer-recorded footage
Users allege that Meta subcontractors in Kenya accessed private recordings from Meta AI Glasses to train artificial intelligence systems. The users’ class action lawsuit is ongoing.
CVS · CVS.com, CVSHealth.com, and the CVS app
Plaintiffs allege that CVS Pharmacy unlawfully shared website and mobile app users' personal, browsing, and sensitive health information with third parties via tracking technologies without consent. The action covers li…
$20,500,000
Labcorp · Patient information provided to American Medical Collection Agency
The class action concerns the alleged exposure of Labcorp patients’ personal and protected health information through the 2019 breach at Labcorp’s debt collector, American Medical Collection Agency. Labcorp has agreed t…
$50.00
Labcorp · Laboratory services and patient information affected by a third-party medical debt-collection data breach
The class action concerns the exposure of personal and health information in a 2019 breach involving Labcorp's debt-collection vendor, American Medical Collection Agency. Labcorp agreed to a separate $35 million settlem…
$35,000,000
Finastra Technology · Finastra financial software platforms and customer data
Living individuals residing in the United States who were sent notice by Finastra Technology, Inc. stating that their private information may have been compromised in the October 2024 data incident.
$2,500.00
Oracle · Online and offline personal data and data brokerage services
The class action alleged that Oracle captured, compiled, and sold consumers’ online and offline data to third parties without consent. Oracle agreed to pay $115 million to resolve the allegations without admitting wrong…
$37.42
City of Columbus · City-collected and stored personally identifiable information
Victims of a 2024 ransomware attack allege that the City of Columbus failed to protect personally identifiable information collected and stored by the city, resulting in the exposure of sensitive information affecting a…
United States government · Government surveillance
The class-action lawsuit, filed in 2011, alleges that the federal government improperly surveilled Muslims in Orange County during the 2006 Operation Flex investigation, including through an undercover informant placed…
Missouri Military Academy · Information security and handling of protected health and personal information
Kristin Adams-Vargas filed a proposed nationwide class action alleging that a June cyberattack on Missouri Military Academy exposed protected health information and personally identifiable information belonging to her a…
Lenovo · Motorola smartphones and related personal data services
A California federal class action filed in February 2026 alleges that Lenovo transferred personal data from U.S. consumers to China in violation of the Department of Justice Data Security Program. The case has not been…
Meta · Meta smart glasses and related AI features
A proposed California class action alleges that workers training Meta's AI viewed footage of people's private moments, including people changing clothes. Meta disputes the claims and plans to fight the lawsuit; the matt…
23andMe · DNA testing kits and genetic ancestry and health services
A consumer class action alleged that 23andMe failed to adequately protect customers' sensitive genetic, health, ancestry, and personal information during a 2023 credential-stuffing attack that affected millions of users…
$100.00
General Motors · Driver data collection and sale of driver data to data brokers and insurance companies
More than 25 class action lawsuits have been filed against General Motors alleging that the automaker sold driver data to data brokers, which then sold the data to insurance companies. The litigation is described as new…
Meta · Ray-Ban Meta smart glasses
A class action against Meta alleges that workers at a Kenya-based subcontractor reviewed footage recorded by customers' Ray-Ban Meta smart glasses, including sensitive content such as nudity, sexual activity, and bathro…
CenterPoint · CenterPoint online guest payment and bill-pay system
A proposed consumer class action filed in the Southern District of Texas alleges that a vulnerability in CenterPoint's online guest payment system exposed customer names, addresses, account information, and potentially…
NFM Lending · Lending services
A proposed class action filed on September 16, 2026 alleges that a ransomware-related breach of NFM Lending’s systems exposed customers’ Social Security numbers and financial account information, and that the lender fai…
OpenAI · ChatGPT
A proposed California class action filed against OpenAI alleges that private ChatGPT conversations were disclosed to human reviewers and contractors through the Lily project without adequate consent, anonymization, or d…
Meta · Ray-Ban Meta smart glasses and related AI media-processing practices
A class-action lawsuit against Meta alleges that the company made misleading privacy claims about Ray-Ban Meta smart glasses and the handling of media submitted for AI improvement. The procedural stage is not specified.
Motorola Solutions · Automated license plate reader and vehicle-tracking data services
A class-action lawsuit accused Motorola Solutions and its subsidiary, Vigilant Solutions, of violating California privacy laws by collecting vehicle-tracking data and sharing it with out-of-state law enforcement and fed…
Monongalia Health System and Grafton City Hospital · Healthcare services and related health information
A plaintiff filed a putative class action in the Circuit Court of Taylor County on behalf of current and former customers of Monongalia Health System and Grafton City Hospital, alleging that inadequate security procedur…
Apple · Apple AirTag tracking devices
A class-action lawsuit brought by 37 people alleges that Apple’s AirTag tracking devices can be misused for stalking and that the company failed to provide adequate anti-stalking safeguards and alerts. The matter is pen…
Oracle · Oracle's data-tracking and data-brokerage practices
The class action alleged that Oracle tracked and indefinitely retained consumers' online and offline personal information, including browsing history, purchases, and geolocation data, and shared or sold that information…
$37.42
Google · Google account tracking and data collection
A class-action lawsuit alleged that Google continued collecting data from third-party smartphone apps after users believed they had disabled a key setting. A federal jury ordered Google to pay $425.7 million to approxim…
Tempus AI · Genetic information and artificial intelligence models
Tempus AI is facing proposed class action litigation alleging that, after acquiring Ambry Genetics in 2025, it transferred patients’ sensitive genetic information to train artificial intelligence models without consent.…
Ambry Genetics · Genetic testing and patient health information
Ambry Genetics faced proposed federal class action litigation alleging that a 2020 phishing attack compromised patients’ sensitive health and personal information. The litigation reached a settlement in 2023 for $12.25…
$10,000.00
Avis · Consumer data security
The class action alleges that an August 2024 Avis security incident compromised customers’ names, driver’s license information, credit card information, birthdates, and phone numbers. Avis denied wrongdoing and agreed t…
$5,000.00
LinkedIn · LinkedIn website and browser-based extension and device scanning
A separate proposed class action alleges that LinkedIn scans browser extensions and device characteristics of users accessing the platform through Chrome-based browsers, associates the information with identifiable memb…
Home Depot · Parking-lot cameras and automated license plate recognition data
A California class action alleges that Home Depot used cameras in parking lots to collect vehicle and license plate data, shared the information with law enforcement, and failed to comply with requirements of California…
Disney · Facial recognition at Disneyland Park and Disney California Adventure
A putative class action alleges that Disney inadequately disclosed its collection and use of visitors' facial-recognition and biometric information at Disneyland Park and Disney California Adventure Park entrances, viol…
U.S. Department of Justice · Gender-affirming healthcare and related hospital health records
Eleven families challenged Department of Justice subpoenas seeking private health information from hospitals providing gender-affirming care to transgender minors and sought nationwide class treatment to quash the subpo…
Krispy Kreme · Doughnuts and related consumer services
A class action alleged that Krispy Kreme failed to adequately protect employee data after a November 2024 cyberattack that affected current and former employees. The parties reached a $1.6 million settlement, and the cl…
$75.00
Meta · WhatsApp
A class-action lawsuit filed earlier in 2026 alleges that Meta misrepresented WhatsApp's encryption practices, including claims concerning the protection of user communications. Meta denies the allegations, and the laws…
Meta · Facebook
A class-action lawsuit accepted by a Milan court alleges that Facebook scraped the personal data of approximately 35 million users. The matter is in ongoing litigation.
Trader Joe's · Customer receipts and credit card information
The class-action lawsuit alleged that Trader Joe's store receipts printed the first six and last four digits of customers' credit cards, creating a potential identity-security risk and allegedly exceeding federal limits…
Walmart · Customer-service phone lines and AI voice-analysis system
Two Illinois residents filed a proposed class action against Walmart, alleging that its customer-service phone system collects and stores callers' voiceprints and analyzes speech patterns without the written notice and…
Meta · Meta smart glasses, the NameTag facial-recognition feature, and certain Meta AI models
A proposed class action filed in Illinois alleges that Meta used photographs publicly posted on Facebook and Instagram to train artificial intelligence that could support NameTag and other facial-recognition tools witho…
Google · Google Play apps and related advertising services
Google and AdMob Google agreed to pay $8.25 million to resolve allegations that personal information was collected, used or disclosed from children younger than 13 through Google Play apps without required parental cons…
$8,250,000
Google · Google Assistant, Nest, Home, and Pixel devices
The class action alleged that Google Assistant could activate and record communications without intentional activation and that Google improperly collected, used, and disclosed audio recordings. Google denied the allega…
$68,000,000
Apple · Apple Photos app and People feature
Plaintiffs allege that Apple's Photos app automatically created and stored facial geometry representations, or faceprints, from images without the notice and written consent required by Illinois's Biometric Information…
PatronScan · PatronScan venue ID and biometric screening system
A putative class-action lawsuit alleges that Servall Biometrics, doing business as Patronscan, unlawfully captured, stored, and disseminated patrons' biometric facial geometry scans without written notice or informed co…
Meta · Meta Pixel
An ongoing class-action lawsuit alleges that Meta's Pixel tracking software allowed Facebook to receive information about users' medical conditions, doctors searched, and appointments booked without their knowledge or H…
Google · Google education platform
Google settled a class-action lawsuit alleging that its education platform improperly captured and stored Illinois students’ biometric data, including voice and facial information. Google did not admit wrongdoing, and t…
Microsoft · Microsoft education hardware and software
Microsoft faces a proposed class-action lawsuit in Washington State alleging that it collects, extracts, and generates extensive student data, creates detailed psychographic profiles, and uses the information for commer…
West Virginia State Police · West Virginia State Police Academy
The class action alleges that hidden cameras were placed in female locker rooms at the West Virginia State Police Academy, invading affected individuals’ privacy. A $9.1 million settlement has been approved, with final…
$9,100,000
Suno · Suno music service
A Suno user filed a proposed class action in Massachusetts federal court alleging that unauthorized actors obtained personal information belonging to approximately 55 million account holders in a November 2025 data brea…
Telenor · Telecommunications and mobile phone services
Justice and Accountability Initiative sued Telenor over alleged sharing of sensitive customer data with Myanmar military authorities after the 2021 coup, which claimants say exposed civil society activists and other cus…
Perplexity AI · Perplexity AI incognito mode
A newly filed privacy class action against Perplexity AI concerns alleged privacy and security issues involving the company’s incognito mode.
Harrison Rural Electrification Association · Internet service
The case alleges that Harrison Rural Electrification Association monitored customers’ internet activity in connection with its internet service, affecting HREA customers. The matter is ongoing litigation.
Comcast · Xfinity
The case alleges that Comcast’s Xfinity service was involved in a data breach exposing customer information. A settlement has been reached.
Eric James · School locker rooms and changing areas
The case concerns alleged privacy violations involving cameras in students’ locker rooms and changing areas, affecting students who used those facilities. The matter is in ongoing litigation.
Disney and Google · Disney's YouTube channel and Google YouTube advertising services
A privacy class action concerns Disney’s YouTube channel and Google’s YouTube advertising services, involving Disney and Google. The case is in ongoing litigation.
Perplexity · Perplexity AI search engine
A newly filed privacy lawsuit alleges that Perplexity’s AI search engine tracks users’ conversations, affecting people who use the service.
Perplexity, Google, and Meta · Perplexity AI
A privacy class action lawsuit concerns alleged privacy and security harms involving Perplexity AI and names Perplexity, Google, and Meta as defendants. The case is in ongoing litigation.
Flock Safety · Automated license plate reader network and license plate data
A privacy lawsuit concerns Flock Safety’s automated license plate reader network and the sharing of license plate data. The case is in ongoing litigation.
Massachusetts Department of Public Health · MassNotify contact-tracing app
The case alleges that the Massachusetts Department of Public Health’s MassNotify contact-tracing app violated users’ privacy. A settlement has been reached.
Telenor · Telecommunications services in Myanmar
The case alleges that Telenor’s telecommunications services in Myanmar involved privacy and security harms affecting customers’ data. The matter is ongoing litigation.
Sutter Health and MemorialCare · Abridge AI
A proposed class action alleges that Sutter Health and MemorialCare improperly used Abridge AI to record medical visits, raising privacy and security concerns for affected patients. The case is identified as a new filin…
Catholic Health · Patient data disclosure and tracking technology
The lawsuit alleges that Catholic Health disclosed or shared patients’ data through tracking technology, affecting patients whose information was involved. The case has reached a settlement.
Sutter Health and MemorialCare · Abridge AI scribe
A privacy class action concerns allegations involving Sutter Health and MemorialCare’s use of the Abridge AI scribe. The case is ongoing litigation.
Payactiv · Payactiv financial services and customer data
The case alleges that a cybersecurity incident compromised Payactiv financial services and customer data, affecting individuals who received a Payactiv data breach notification and experienced eligible documented losses…
$2,500.00
PowerSchool · PowerSchool student information system
The class action lawsuit alleges that PowerSchool’s student information system was involved in a data breach affecting individuals whose information was maintained in the system. The case is ongoing.
Santa Fe Christian Schools · Visiting-team locker-room facilities and video surveillance
The case alleges that Santa Fe Christian Schools recorded or monitored visiting-team locker-room facilities, potentially affecting individuals who used those facilities and implicating privacy concerns. The matter is id…
Humana and CenterWell · Health insurance and healthcare services
The case alleges that Humana and CenterWell experienced a data security incident affecting personal information connected to their health insurance and healthcare services. The matter is in ongoing litigation.
City of San Jose and San Jose Police Department · Flock Safety automatic license plate reader surveillance network
The lawsuit concerns the City of San Jose and the San Jose Police Department’s Flock Safety automatic license plate reader surveillance network in a privacy-related dispute. The case is ongoing.
Meta Platforms and Accenture · WhatsApp
The case concerns alleged privacy and encryption-related issues involving WhatsApp and defendants Meta Platforms and Accenture. The litigation is ongoing.
Academy Mortgage · Mortgage lending and underwriting services
The case alleges that Academy Mortgage, a provider of mortgage lending and underwriting services, experienced a 2023 data breach affecting individuals whose personal information may have been involved. The matter is in…
$3,000.00
Metropolis Technologies · Parking services and parking violation notices
The case alleges that Metropolis Technologies improperly handled vehicle-owner information in connection with parking services and parking violation notices. The matter involves privacy and security claims and is curren…
Perplexity AI · Perplexity AI chat service
A newly filed privacy lawsuit concerns Perplexity AI’s chat service and alleges harm involving privacy and security. The case is currently at the new-filing stage.
Sutter Health and MemorialCare Medical Foundation · Abridge AI ambient clinical documentation tool
The lawsuit alleges that Sutter Health and MemorialCare Medical Foundation violated privacy rights through use of the Abridge AI ambient clinical documentation tool. The case is identified as a new filing.
Santa Fe Christian Schools · Private school education and campus security cameras
The case alleges that Santa Fe Christian Schools’ use of campus security cameras implicated student privacy through recording. The matter is in ongoing litigation.
Lakeview Loan Servicing · Mortgage lending and loan servicing
A class action alleges that Lakeview Loan Servicing experienced a data breach affecting individuals whose personal information was involved in the incident. The case has reached a settlement, and eligible class members…
$5,000.00
SouthState Bank · Banking services and customer data
The case concerns allegations that a February 7, 2024 data breach involving SouthState Bank affected current and former customers and their data. A settlement has been reached, and the associated settlement-claim proces…
$3,500.00
Northwell Health · Patient portal and website tracking technology
The lawsuit alleges that Northwell Health shared patient information through tracking technology on its FollowMyHealth patient portal and website, affecting patients who used the portal or booked appointments during the…
$15.00
PowerSchool Holdings · Naviance
The case alleges that PowerSchool Holdings’ Naviance platform was involved in a privacy and security incident affecting individuals who, while students, logged into Naviance at least once between August 18, 2021, and Ja…
$17,250,000
Naviance · Naviance college and career readiness platform
The case concerns alleged privacy issues involving student data associated with Naviance, a college and career readiness platform, potentially affecting students who used the platform within the last five years. A settl…
$17,250,000
AAA Northeast · Driver Training School
The case alleges that AAA Northeast’s Driver Training School experienced a data breach affecting individuals whose personal information may have been compromised. The matter is identified as a newly filed privacy class…
Sutter Health and MemorialCare · Abridge AI ambient clinical documentation and transcription software
An ongoing privacy lawsuit concerns Sutter Health and MemorialCare’s use of Abridge AI ambient clinical documentation and transcription software. The case involves alleged privacy and security harms.
Otter.ai · Otter AI recording and note-taking service
A privacy class action lawsuit against Otter.ai concerns alleged data use involving its recording and note-taking service. The case is in ongoing litigation.
Comcast · Xfinity
A class action alleges that Comcast’s Xfinity data breach compromised information associated with affected Xfinity account holders. The case has reached a settlement, and eligible individuals may submit claims, with doc…
$117,500,000
Patelco Credit Union · Credit union services
The case alleges that Patelco Credit Union’s 2024 data breach compromised consumers’ information and seeks relief for affected consumers, including reimbursement for documented losses or payments for those who did not i…
$7,500,000
Meta Platforms and WhatsApp · WhatsApp messaging service
The ongoing class action concerns alleged privacy and access issues involving Meta Platforms and WhatsApp’s messaging service.
Booz Allen Hamilton and Internal Revenue Service
This class action concerns an alleged leak of taxpayer information involving Booz Allen Hamilton and the Internal Revenue Service. The case is in ongoing litigation.
Telenor · Telecommunications and mobile phone services
The case alleges that Telenor disclosed customer data in connection with its telecommunications and mobile phone services, affecting its customers. The litigation is ongoing.
Meta and EssilorLuxottica · Meta AI Glasses
Meta and EssilorLuxottica face allegations that their AI-enabled Meta AI Glasses captured, stored, and transmitted users' private audiovisual data without adequate disclosure or consent. The class action is described as…
Google · Android operating system
The settlement resolves allegations that Google improperly collected or used data associated with Android users. The matter has reached a settlement involving a $135 million fund for potentially affected U.S. Android us…
$100.00
Cedar County Memorial Hospital · Hospital healthcare services and patient information systems
A proposed class action filed in Cedar County Circuit Court alleges that Cedar County Memorial Hospital failed to adequately secure patients' and employees' sensitive information before an August ransomware incident and…
Brooke County Board of Education and Eric James · School locker rooms and student privacy
A newly filed class action brought by students alleges that former school principal Eric James installed concealed cameras in girls’ locker rooms and changing areas and viewed students undressing via livestream, asserti…
Concord Housing and Redevelopment Authority · Mēnut in-home sound and motion monitoring devices
Residents of Concord Housing and Redevelopment Authority subsidized housing allege that the authority violated their privacy rights by installing Mēnut sound and motion monitoring devices inside residential units and co…
Motorola · Automated license plate reader technology
Two UC Merced students filed a class-action lawsuit in July 2026 alleging that Motorola's automated license plate readers violate California privacy law. The current procedural stage beyond the filing is not specified.
DaVita · Kidney dialysis and related healthcare services
A proposed class action alleges that a ransomware attack on DaVita exposed patients' personal and health information, including Social Security numbers, insurance information, dialysis lab results, and images of checks.…
$15,000,000
Wake County · Medical examinations and prenatal care at county health clinics
The class-action lawsuit alleged that a former Wake County nursing assistant secretly recorded women during examinations and in bathrooms at county health clinics between approximately 2017 and 2021, including during pr…
$285,000
Brooke County Board of Education and Eric Michael James · Brooke High School facilities and student privacy
A 17-year-old student and her mother filed a lawsuit alleging that concealed devices recorded or may have recorded the student in Brooke High School changing areas, and that the school board and former principal Eric Mi…
Brooke County Board of Education and Eric Michael James · Brooke High School facilities and student privacy
Seven student plaintiffs filed a proposed class action alleging that former Brooke High School principal Eric Michael James secretly recorded female students in school locker rooms and changing areas, and that the Brook…
700Credit · 700Dealer.com web application
The proposed class action settlement resolves allegations that 700Credit failed to prevent unauthorized access to its 700Dealer.com web application, potentially exposing names, dates of birth, Social Security numbers, a…
Brooke County Board of Education · Brooke High School education services and student facilities
A class action lawsuit has been filed against former Brooke High principal Eric James and the Brooke County Board of Education after recording devices were allegedly found in girls’ facilities at the school. The lawsuit…
DentaQuest · Dental benefits and health information services
Amanda Whitlow filed a proposed class action in the U.S. District Court for the District of Massachusetts alleging that DentaQuest failed to adequately protect patients’ personal, health, and insurance information durin…
NJ Lenders · Mortgage lending and customer information systems
The proposed settlement resolves claims that a targeted cyberattack on NJ Lenders' systems in August 2025 allowed unauthorized access to files containing customers' names, Social Security numbers, and other personal inf…
Grindr · Grindr dating application
The class action alleges that Grindr disclosed users’ sensitive personal information, including ethnicity, sexual orientation, and HIV status, to external analytics companies for commercial purposes in violation of UK p…
Flock Safety · Flock Safety automated license-plate-reader cameras and vehicle-location tracking system
An amended class action complaint filed in California alleges that Flock Safety cameras illegally track people’s daily movements and share the resulting information with law-enforcement agencies in other states, alleged…
FinWise Bank, FinWise Bancorp, and American First Finance · Data breach involving exposed personal information
Living, natural persons residing in the United States whose private information was affected by the FinWise data incident occurring on or about May 31, 2024, including individuals who received a data-incident notice. Th…
$5,000.00
Brooke County School District · Public school facilities
A class-action lawsuit was filed concerning allegations that hidden recording devices were placed in areas where female students changed clothes at Brooke High School. The lawsuit's specific claims, defendants, and curr…
SitusAMC · Data security and protection of personal information
U.S. residents who were sent notice that their personal information was involved in the SitusAMC data incident occurring on or about November 12, 2025, are generally included. Exclusions include SitusAMC's executive lea…
$75.00
HCA Healthcare · CareNow urgent care online appointment scheduling
Three patients filed a class action lawsuit in Davidson County alleging that HCA Healthcare's CareNow website required cookies and tracking tools to schedule urgent care appointments online and shared patients' informat…
IDScan.net · Identity-verification and driver’s-license scanning services
At least four class-action lawsuits filed in the Eastern District of Louisiana allege that driver’s license images and related personal information were exposed through IDScan.net’s identity-verification systems and mad…
Comcast · Xfinity
Comcast agreed to establish a $117.5 million settlement fund to resolve claims arising from an October 2023 cyberattack that may have exposed customers' personal information. The matter reached a settlement, with claims…
$117,500,000
Gas Express · Circle K-operated locations and customer information
Gas Express, which does business as Circle K, agreed to settle claims arising from a May 2024 cyberattack in which files containing names, Social Security numbers and other private information may have been accessed. Th…
Ledger · Crypto hardware wallets and related customer services
A Ledger user filed a $500 million class-action lawsuit alleging that Ledger failed to adequately protect customers from, and respond to, a series of data breaches. The lawsuit was filed on August 27, and its current pr…
Concord Housing and Redevelopment Authority · Minut residential monitoring sensors
Residents of Concord Housing and Redevelopment Authority properties allege that required Minut sensors continuously collected information about noise, smoking, Bluetooth-connected devices, and occupancy inside their hom…
Motorola Solutions · Automated license plate reader cameras and related data services
A California class-action lawsuit alleges that Motorola Solutions shared drivers’ license plate and related location data with federal and out-of-state agencies without consent and sold the data to third parties for com…
Ceva Logistics · Logistics and warehouse fulfillment services
A former Ceva Logistics employee filed a proposed class action alleging that the company failed to adequately protect employees' personal information, including bank account details and Social Security numbers, during a…
CUSO Financial Services · Financial services and third-party data archiving
A proposed class action alleges that unauthorized access to an employee account at a third-party archiving provider exposed the personal and financial information of approximately 75,116 people, including names, Social…
$1,750,000
Westchester County Police Department · Automated license plate reader vehicle surveillance system
The New York Civil Liberties Union and other organizations filed a class-action lawsuit challenging the Westchester County Police Department's vehicle surveillance system, which allegedly includes at least 575 automated…
Sutter Health and Memorial Care · Abridge AI clinical documentation platform
Plaintiffs allege that medical staff at Sutter Health and Memorial Care facilities used Abridge AI to record and transcribe confidential physician-patient communications without clear notice or consent, allegedly violat…
Meta · Meta social media platforms and artificial intelligence models
A class-action lawsuit brought by journalists, podcasters, and audiobook narrators alleges that Meta harvested users’ data without permission to train artificial intelligence models. The current procedural stage is not…
Edward Aber · La Plata County Jail detention and strip-search video recordings
Women formerly detained at La Plata County Jail allege that former jail commander Edward Aber improperly accessed and viewed videos of their strip searches, including from outside the jail. The matter was consolidated i…
xAI · Grok
A proposed class action filed by a survivor alleges that xAI trained its Grok chatbot using child sexual abuse material depicting her, stored and reused generated images, and generated further abusive material based on…
American Vision Partners · Eye care physician services and related data systems
The class action alleges that American Vision Partners failed to adequately protect patients' sensitive personal information during a November 2023 data breach affecting approximately 1.6 million people. American Vision…
$3,000.00
Meta, ElevenLabs, Apple, Amazon, Microsoft, and four other technology companies · Artificial-intelligence voice and audio software
A class-action lawsuit filed in Chicago alleges that nine technology companies, including Meta, ElevenLabs, Apple, Amazon, and Microsoft, collected voice and audio files without consent for use in artificial-intelligenc…
xAI · Grok AI
A proposed class action filed in January 2026 alleges that xAI created and operated Grok in a manner that enabled users to digitally alter a woman's photographs into sexually revealing or sexualized images that were pub…
Sutter Health · Healthcare services
A class-action lawsuit accused Sutter Health of sharing patients’ personal information. The matter reached a settlement, and payments of $68.81 to some class members are reportedly beginning.
$68.81
LACMA · Museum services and information systems
A former Los Angeles County Museum of Art employee filed a putative class action alleging that LACMA negligently failed to protect personal information accessed in a 2025 data breach, including Social Security numbers a…
Google · Google location history and geographic location tracking
The class action alleged that Google misled users into believing device settings could disable geographic location tracking while Google continued tracking their devices. A federal district court approved a settlement i…
$62,000,000
Gándara Mental Health Center · Mental health services and related personal information
A class action was filed after a June 2024 cyberattack on Gándara Mental Health Center, concerning individuals affected by the incident. The lawsuit has settled, and a final approval hearing was held.
Amazon · Ring doorbells and the Familiar Faces facial-recognition feature
A class action lawsuit filed in June alleges that Amazon stored images of passersby without their consent through Ring's Familiar Faces facial-recognition feature. The current procedural stage is not specified.
Troutman Pepper Locke · Law firm data and information systems
A West Virginia resident filed a proposed federal class action against Troutman Pepper Locke, alleging that a social engineering incident exposed private information belonging to approximately 37,000 people and left the…
SoundHound AI · Voice-enabled customer phone-call services
A class action lawsuit in California alleges that SoundHound AI recorded customers' telephone calls without authorization. The current procedural stage is not specified.
MCNA · Dental insurance and health information systems
A proposed class action settlement concerns allegations that hackers accessed Managed Care of North America's computer systems between February 26 and March 7, 2023, potentially exposing patients' personal and protected…
$2,500.00
LifeStance Health · Mental health services and website tracking technologies
A class action alleges that tracking pixels on LifeStance Health's website shared patients' personally identifiable information with Google and Facebook without consent, potentially violating HIPAA and Arizona's Consume…
$3,027,874
TABB · Pre-employment background checks
The proposed class action alleged that a configuration error made a TABB database containing sensitive background check information publicly discoverable, exposing job applicants to potential unauthorized access. The fe…
Henry Ford Health · Hospital and healthcare services
A class action settlement covers people who could prove that Dr. Oumair Aejaz recorded and sexually assaulted them or recorded them while they were undressed or depicted in a sexualized manner at Henry Ford facilities b…
$125,000,000
AIS InfoSource · Fintech services and consumer personal information
United States residents who received notice that their personally identifiable information may have been involved in AIS InfoSource's February 2025 data incident, including people who received prior incident notice, may…
Meta and Luxottica of America · Meta smart glasses and related AI features
A federal class action filed in the U.S. District Court for the Northern District of California alleges that Meta and Luxottica of America misled consumers by marketing smart glasses as designed for privacy while routin…
Curriculum Associates · Educational software and student data
California parents allege that Curriculum Associates collects and shares student data with third parties through its educational technology products, including i-Ready. Curriculum Associates denies the allegations and h…
UCHealth · UCHealth’s “Find a Doctor” website feature and possibly patient portal
A proposed class-action lawsuit filed by a Larimer County resident alleges that UCHealth used Meta Pixel on its “Find a Doctor” feature and possibly its patient portal to share patients’ sensitive search information and…
Frontier Airlines · Airline passenger services
A class action filed against Frontier Airlines in the United States District Court for the District of Colorado alleges that the airline failed to timely inform passengers about a data breach following breaches in May a…
Frontier Airlines · Airline passenger services
A class action filed against Frontier Airlines in the United States District Court for the District of Colorado alleges that the airline failed to timely inform passengers about a data breach following breaches in May a…
Samsung · Samsung Gallery app on Android smartphones
The putative class action alleged that Samsung's preinstalled Gallery app scanned facial geometry from people depicted in photos and videos stored on Samsung smartphones without the consent and notices allegedly require…
San Jose · Automated license plate reader program
Three San Jose residents filed a class-action lawsuit against the City of San Jose alleging that its automated license plate reader network violates drivers’ constitutional privacy rights and constitutes mass surveillan…
Comcast · Cable and internet services
The class action alleges that Comcast failed to use reasonable cybersecurity measures to protect customers' personal information during an October 2023 data breach. Comcast denied wrongdoing and agreed to a $117.5 milli…
$117,500,000
Maine Course Hospitality Group · Hotel and hospitality services
A proposed class action filed in federal court alleges that Maine Course Hospitality Group failed to implement reasonable security measures, compromising the names, Social Security numbers, and health information of nea…
Flagstar Bank · Banking services and consumer personal information
The case concerns alleged exposure of personal information belonging to approximately 2.19 million people in two 2021 cyberattacks involving Flagstar Bank. The parties reached a proposed $31.5 million class action settl…
$60.00
CRH Healthcare · Peachtree Immediate Care websites, patient portals, and online healthcare services
A proposed class action alleged that CRH Healthcare, doing business as Peachtree Immediate Care, used website tracking technologies to transmit patients' protected health information and personally identifiable informat…
AppLovin · Digital advertising and data-tracking services
A mass class-action lawsuit in the Netherlands alleges issues concerning AppLovin's data-tracking practices in connection with its digital advertising business. The current procedural stage is not specified.
Hisense · Hisense Smart Televisions and automatic content recognition technology
A federal class-action complaint filed against Hisense USA alleges that its televisions' automatic content recognition technology captures images and audio from programming and connected devices, along with associated i…
The Pokémon Company International · Bellevue office bathroom facilities
An anonymous plaintiff filed a proposed class action against The Pokémon Company and former engineering executive Ben Tsai, alleging that hidden cameras were placed in a bathroom at the company's Bellevue, Washington he…
Arrowhead Regional Computing Consortium · Payroll services and student data systems
The class action alleges that Arrowhead Regional Computing Consortium failed to use adequate cybersecurity practices, allowing unauthorized access to personal information, including names, Social Security numbers, and s…
$80.00
Crunch Fitness · Gym membership and tanning services
Six women filed a proposed class action alleging that Crunch Fitness failed to protect members who used tanning rooms at its Mandeville facility after an employee was accused of secretly recording women in the rooms, in…
Everside Health · Healthcare services
Murphy Law Firm is investigating potential class-action claims on behalf of individuals whose personal and confidential information was allegedly compromised in a data breach involving Everside Health. The current proce…
City Ambulance Service · Private ambulance and emergency medical transportation services
A proposed class action filed in Harris County alleges that City Ambulance Service failed to adequately protect patients’ and employees’ medical, financial, and personal information during a July 19, 2026 cyberattack. T…
City Ambulance Service · Private ambulance and emergency medical transportation services
A proposed class action filed in Harris County alleges that City Ambulance Service failed to adequately protect patients’ and employees’ medical, financial, and personal information during a July 19, 2026 cyberattack. T…
City Ambulance Service · Private ambulance and emergency medical transportation services
A proposed class action filed in Harris County alleges that City Ambulance Service failed to adequately protect employees’ and patients’ medical, financial, and personal information during a July 19, 2026 cyberattack. T…
Lenovo · Pre-installed Lenovo software
A 2025 U.S. class-action lawsuit alleged that Lenovo pre-installed software transferred consumers' behavioral data to Chinese-linked infrastructure. The current procedural stage is not specified.
Home Depot · Orange Apron Media retail advertising network and Home Depot website, social media, and stores
A class action filed by William E. Wright alleges that Home Depot, through its Orange Apron Media retail advertising network, sold or disclosed customers' personally identifiable information and purchasing data to third…
Flock Safety · Flock Safety cameras and automated license plate reader databases
A class action filed in February 2026 alleges that federal agencies, including ICE, CBP, the FBI, and the ATF, queried San Francisco's Flock Safety database more than 1.6 million times over seven months, raising privacy…
Chick-fil-A · Chick-fil-A One loyalty accounts
A law firm is investigating a potential consumer class action on behalf of Chick-fil-A One account holders in Texas and Massachusetts who received data-breach notifications after a cyberattack allegedly exposed informat…
New York City Department of Correction · Jail telephone and communication surveillance services
The Bronx Defenders, Brooklyn Defender Services, New York County Defender Services, and Cleary Gottlieb Steen & Hamilton filed a class-action lawsuit against the New York City Department of Correction alleging that its…
Kroll · Bankruptcy claims administration and creditor data systems
A putative class action filed on behalf of FTX creditors alleges that Kroll negligently protected creditor names, contact information, account numbers, balances, and other data exposed in an August 2023 SIM-swap breach,…
Home Depot · Parking-lot cameras and vehicle-data collection
A separate California class action allegedly claims that Home Depot used parking-lot cameras to collect vehicle data and provided that information to law enforcement agencies nationwide. The current procedural stage is…
Flock · Flock license-plate readers and collected vehicle data
A California class action alleges that Flock Safety violated state privacy law by sharing automated license-plate reader data with external and federal authorities. The current procedural stage is not specified.
xAI · Grok chatbot
Families of five children allege that xAI and other companies failed to implement adequate safeguards to prevent users from creating sexually explicit deepfake images of minors without consent, including images generate…
Atrium Health · Patient portal and pixel tracking technology
Atrium Health reached a $1.8 million settlement in a civil class action alleging that pixel tracking codes used on its patient portal disclosed patients' health information. The matter is described as having reached a s…
Wellstar · Wellstar web properties and Tracking Technology
Wellstar agreed to pay $4.25 million to resolve a proposed consumer class action lawsuit related to data privacy. The specific alleged conduct and current procedural details beyond the proposed settlement are not specif…
$4,250,000
Wiese USA · Material-handling equipment and industrial services
A proposed class action filed by a Wiese USA employee alleges that a June 2026 cyber incident allowed an unauthorized third party to access and remove files containing sensitive personal information, and that the compan…
MCBS · Medical billing and healthcare data services
A proposed federal class action alleges that MCBS's allegedly inadequately protected computer systems were breached and that threat actors exfiltrated sensitive personal and medical information belonging to patients of…
Digital Recognition Network · Automated license plate reader data collection and storage
Guillermo Mata alleged that Digital Recognition Network violated California's automated license plate reader statute by collecting and storing vehicle license plate data in a manner that invaded consumers' privacy. The…
Google · Gemini, Gmail, Google Chat, and Google Meet
A class-action lawsuit alleges that Google used hidden settings to automatically provide users' Gmail emails and attachments for AI training without clear notice or an easily accessible opt-out process. The current proc…
Alcott HR Group · Human resources services and personal information management
Murphy Law Firm is investigating potential class-action claims on behalf of individuals whose personal and confidential information was allegedly compromised in a data breach involving Alcott HR Group. The current proce…
Mt. Baker Imaging and Northwest Radiologists · Healthcare imaging and radiology services
A class action alleges that a ransomware attack between January 20 and January 25, 2025, exposed the personally identifiable and protected health information of approximately 340,184 people because Mt. Baker Imaging and…
$3,300,000
Madison Square Garden Entertainment · Facial-recognition surveillance records
A proposed federal class action alleges that a cyberattack on Madison Square Garden exposed approximately 45 GB of company data, including facial-recognition surveillance records, potentially affecting people whose info…
City of San Jose · Flock Safety license plate tracking cameras
A group of San Jose residents filed a class action lawsuit against the City of San Jose, alleging that the city's use of automated license plate reader cameras violated the Fourth Amendment's protections against unreaso…
Madison Square Garden Entertainment · Madison Square Garden visitor surveillance, facial-recognition, and data-collection systems
A proposed class action filed in New York federal court alleges that Madison Square Garden Entertainment failed to adequately protect sensitive visitor information, including biometric data and personal identifying info…
Lenovo · Lenovo pre-installed software and telemetry on consumer devices
A class-action lawsuit filed in February 2026 alleges that Lenovo's pre-installed software transferred consumers' hardware configuration, application usage, browsing history, device identifiers, and geolocation data to…
Charter Communications · Spectrum cable, internet, and phone services
Plaintiffs allege that Charter Communications failed to maintain reasonable safeguards after attackers used voice phishing to obtain employee credentials and access systems containing personal information associated wit…
Lemonade · Online insurance quoting platform
A consolidated class action alleges that Lemonade’s online quoting platform exposed the driver’s license numbers of approximately 190,000 consumers between April 2023 and September 2024. Lemonade agreed to a $10.5 milli…
$10,000.00
Deanco Healthcare · Mission Community Hospital healthcare services and patient data
A consolidated class action alleges that a May 1, 2023 cyberattack involving Deanco Healthcare, doing business as Mission Community Hospital, exposed patients' personally identifying, financial, insurance, and clinical…
$1,500,000
Rebound Orthopedics & Neurosurgery · Orthopedic and neurosurgical healthcare services and computer systems
Former patients alleged that a February 2024 cyberattack on Rebound Orthopedics' computer systems may have exposed files containing private information. The Clark County Superior Court approved a $2.5 million settlement…
Premium Parking Service, Municipal Parking Services, GovCIO, and LOB · Private parking enforcement using automated license plate readers and motor vehicle records
A proposed class action filed in Maryland federal court alleges that Premium Parking Service, Municipal Parking Services, GovCIO, and LOB used automated license plate readers and state motor vehicle records to send driv…
Fluke · Employee data security
An employee filed a proposed class action alleging that Fluke Corp. failed to adequately protect employees’ personal information from a data breach. The lawsuit was filed in the U.S. District Court for the Western Distr…
xAI · Grok AI chatbot
Plaintiffs filed a class-action lawsuit against xAI alleging that its Grok AI chatbot was used to create child sexual abuse material from their real photographs. The matter is described as filed, and its further procedu…
Meta · Facebook
The class action alleged that Cambridge Analytica obtained Facebook users' personal data without their knowledge and used it for political advertising. Meta agreed to a $725 million settlement, and a second distribution…
$725,000,000
Sharp HealthCare · Abridge ambient AI medical scribe and recording technology
A California patient filed a putative class action alleging that Sharp HealthCare used Abridge's ambient AI technology to audio-record a medical visit without informed consent and falsely documented that the patient had…
Westchester County · License plate reader surveillance network
Civil rights groups filed a class action on behalf of New York residents alleging that Westchester County’s nearly 600 license plate readers create a warrantless and indiscriminate surveillance system that violates the…
Instructure · Canvas online learning platform
A San Diego resident filed a proposed class action against Instructure alleging that the company failed to implement adequate measures to safeguard personally identifiable information compromised in the Canvas data brea…
Instructure · Canvas online learning platform
A Baylor University nursing student filed a proposed class action against Instructure alleging that compromised Canvas messages could contain sensitive communications, including disability-accommodation requests and har…
Trump administration · Medical records and gender-affirming healthcare services
A class-action lawsuit has been filed seeking to stop medical records of transgender children treated by Mount Sinai and potentially other providers from being shared with the Trump administration in response to federal…
Comcast · Cable and internet services
Comcast agreed to pay $117.5 million to resolve allegations that inadequate security measures led to a 2023 data breach and that customers were not properly notified. The matter has reached a settlement, with claims due…
$117,500,000
Fidelity Investments · Financial services
Fidelity Investments agreed to pay $2.5 million to resolve allegations that a third party accessed its network in 2024, potentially exposing the personal information of approximately 77,000 customers. The matter has rea…
$2,500,000
Lakeview Loan Servicing · Mortgage servicing and customer data
Customers alleged that Lakeview Loan Servicing failed to adequately protect personal information exposed in a data breach on October 11, 2021, including Social Security numbers and loan numbers. Lakeview Loan Servicing…
$26,000,000
Complete Payroll Solutions · Payroll services and employee data
Individuals alleged that Complete Payroll Solutions failed to prevent a data breach around March 10, 2024, that exposed employee information including Social Security numbers, driver’s license numbers, financial data, a…
$100.00
U.S. Department of Homeland Security · Systematic Alien Verification for Entitlements (SAVE) database
The League of Women Voters filed a class action lawsuit against the U.S. Department of Homeland Security seeking to halt federal requests for state voter information and the use of the SAVE database to purge voter rolls…
NYC Health + Hospitals · Healthcare services and patient information systems
A putative class action filed in Manhattan federal court alleges that NYC Health + Hospitals failed to adequately protect sensitive patient, staff, and family-member information, including Social Security numbers, medic…
NYU Langone · Gender-affirming healthcare and related medical records
A group of transgender New Yorkers, some represented by their parents, filed a class-action lawsuit against NYU Langone and the U.S. Department of Justice challenging the constitutionality of a grand jury subpoena seeki…
Comcast · Xfinity communications services and customer information
The class action alleges that Comcast failed to adequately protect personal information exposed in an October 2023 breach affecting Xfinity customers, including usernames, passwords, contact information, dates of birth,…
$117,500,000
Fidelity Investments · Consumer data security
Consumers allegedly affected by a Fidelity Investments data breach are identified as part of a class-action settlement. The matter has reached a settlement stage.
Toronto Cosmetic Surgery Institute · Plastic surgery and cosmetic medical services
A class action brought by former patients and other patients of the Toronto Cosmetic Surgery Institute alleged that cameras recorded patients without adequate notice or consent, including in areas where patients had a r…
NYU Langone and U.S. Department of Justice · Gender-affirming healthcare and related patient medical records
A group of trans New Yorkers, including minors represented by their parents, filed a class-action lawsuit against NYU Langone and the U.S. Department of Justice seeking to block disclosure of medical records concerning…
Meta · WhatsApp
A consumer class-action lawsuit alleges that Meta allowed employees and third parties to read supposedly private WhatsApp messages, contrary to the company's public statements about message privacy. Meta denies the alle…
U.S. Attorney's Office for the Northern District of Texas · Gender-affirming medical care and related medical records
Three transgender youth and two transgender adults who received gender-affirming care at NYU Langone filed a class-action lawsuit seeking to block the release of their medical records under federal criminal subpoenas. T…
U.S. Department of Justice and NYU Langone Health · Gender-affirming care and related medical records
Transgender patients and their families filed a federal class action against the U.S. Department of Justice, acting Attorney General Todd Blanche, and NYU Langone-related defendants, alleging that efforts to obtain or d…
Station Casinos · Casino and hospitality services
A putative class action filed in the U.S. District Court for the District of Nevada alleges that Station Casinos and its parent and subsidiaries failed to adequately protect customer data before and during a March cyber…
NYU Langone Health and U.S. Department of Justice · Healthcare services and patient medical records related to gender-affirming care
A putative class action filed in the U.S. District Court for the Southern District of New York alleges that NYU Langone Health's disclosure of sensitive records concerning transgender patients' gender-affirming care to…
U.S. Department of Justice and New York Attorney General · Gender-affirming medical care and hospital medical records
Three families and two young adults filed a federal class action alleging that efforts by the U.S. Department of Justice and New York Attorney General to compel New York City hospitals to disclose the identities and sen…
IMA Diligence Services · Data security and personal information
A reported data breach involving IMA Diligence Services allegedly exposed sensitive personal information, including Social Security numbers, financial account information, driver's license numbers, and medical and healt…
Industrial Acceptance Corporation · Data security and protection of personal information
A proposed consumer class action concerns a data breach involving Industrial Acceptance Corporation that allegedly exposed names, Social Security numbers, and driver's license numbers. The procedural stage of the matter…
Associated Press · AP news website
A California resident filed a putative class action alleging that Associated Press tracking technologies, including pixels from third-party companies, captured specific web pages visited by users of the AP news website…
Carnival Cruise Line · Cruise travel and passenger information systems
A law firm is seeking passengers affected by Carnival Cruise Line's reported 2026 data breach for a potential class-action lawsuit. Carnival said an unauthorized actor accessed part of its information systems through a…
US Mortgage Corp. · Mortgage lending services
Consumers filed a class-action lawsuit against US Mortgage Corp. after a May 2025 data breach allegedly exposed sensitive personal information on the dark web. The lawsuit was filed in March 2026; no later procedural st…
Coupang · Coupang customer accounts and personal data
Plaintiffs allege that Coupang and chairman Bom Kim failed to adequately protect customer personal information and maintain appropriate cybersecurity systems after a data breach. The $5 million class-action lawsuit was…
Gas Express · Circle K customer information and data-security systems
The class action alleges that Gas Express, which operates Circle K locations, failed to adequately safeguard customers’ personal information accessed during a May 2024 cyberattack. The parties reached a settlement provi…
23andMe · Consumer genetic testing and DNA Relatives services
The class-action matter concerns allegations that 23andMe failed to protect customers' genetic, ancestry, and health information during a 2023 data breach affecting millions of users. 23andMe agreed to pay a $30 million…
23andMe · Genetic testing and DNA-relatives services
23andMe reached a $30 million settlement in 2024 resolving a class-action lawsuit concerning the company's 2023 data breach, which exposed genetic and related personal information of customers. The matter reached settle…
City of Boulder · Flock Safety automated license plate reader cameras
A putative class action alleges that the City of Boulder and its police department used Flock Safety automated license plate reader cameras to surveil residents without warrants, probable cause, or adequate privacy safe…
Boulder Police Department · Flock cameras and vehicle surveillance
A proposed class action alleges that the Boulder Police Department used 31 Flock cameras to surveil people and scan their vehicles without probable cause, allegedly violating privacy rights. The lawsuit was filed and it…
Washington State Department of Licensing · License Express and Washington driver’s license services
The lawsuit alleges that a defect in the Washington Department of Licensing’s License Express system allowed individuals to derive driver’s license numbers using publicly available names and birth dates, then redirect l…
Walt Disney · Disneyland and Disney California Adventure Park facial-recognition and biometric-data practices
A newly filed class-action lawsuit alleges that Disneyland and Disney California Adventure Park failed to properly disclose the collection of visitors' biometric information, including through facial recognition at park…
ByteDance · CapCut
A federal class action filed in Illinois alleges that ByteDance secretly collected CapCut users' biometric data, photos, videos, and location information without consent. The case was allowed to proceed in March 2025 an…
ElevenLabs · AI voice models trained using voice recordings
A group of journalists and voice actors filed a proposed class action in Illinois federal court alleging that ElevenLabs and other technology companies used their voices to train artificial-intelligence models without c…
Beacon Mutual Insurance · Workers' compensation insurance
A class-action lawsuit filed on May 22, 2026, alleges that Beacon Mutual failed to adequately secure, safeguard, encrypt, or timely destroy personal information involved in a January 2026 data breach affecting workers'…
Grace Design Studios · Data security for personally identifiable and protected health information
A proposed nationwide class action was filed in federal court against Grace Design Studios, alleging that the architectural firm failed to adequately safeguard personally identifiable and protected health information be…
Comcast · Xfinity
Hasson v. Comcast Cable Communications LLC alleges that Comcast failed to adequately protect sensitive personal information exposed in an October 2023 cybersecurity incident affecting approximately 36 million Xfinity cu…
$50.00
AppLovin · Mobile application tracking and advertising software
The Privacy Collective filed a class-action lawsuit against AppLovin alleging that tracking software embedded in mobile applications and games unlawfully collected and shared the personal data of millions of Dutch users…
Comcast · Xfinity services
A class-action lawsuit alleges that a cyberattack in October 2023 exposed the personal information of approximately 36 million Xfinity customers. Comcast agreed to pay $117.5 million to resolve the claims, and the matte…
$117,500,000
Disney · Facial recognition technology at Disneyland Resort park entrances
A proposed class action filed in a U.S. District Court in New York alleges that Disney scanned a park visitor's face without adequate consent and failed to sufficiently disclose its collection and use of biometric data,…
Amazon Web Services and Pindrop Security · Cloud-hosted telephone voice identity verification used for John Hancock customer calls
Illinois residents alleged that Amazon Web Services and Pindrop Security improperly recorded or processed their voices during telephone identity verification calls to John Hancock without the notice and consent required…
U.S. Department of Homeland Security · Facial-recognition surveillance and immigration enforcement
A lawful observer in Maine and other affected individuals allege that Immigration and Customs Enforcement and the Department of Homeland Security scanned faces, recorded identifying information, and retaliated against o…
Boston Capital Holdings · Personal information held by Boston Capital Holdings
Murphy Law Firm is investigating an alleged data breach involving Boston Capital Holdings that reportedly exposed individuals' names and Social Security numbers. The firm invites potentially affected individuals to join…
OpenAI · ChatGPT
A class action lawsuit against OpenAI alleges that the company shared user data, including chats, emails, and user IDs, with technology companies such as Meta and Google. The matter is described as currently facing Open…
Perplexity · Generative AI chatbot services and targeted advertising technologies
A class action alleged that Perplexity, Meta, and Google disclosed users' chatbot conversation transcripts for targeted advertising. The action was voluntarily dismissed, leaving its final procedural status as closed.
Capital One · Banking and financial services
Customers brought a class action alleging that Capital One failed to address security vulnerabilities that contributed to a 2019 breach exposing personal and financial information. Capital One settled the litigation, wi…
Meta and Google · Meta Pixel, Facebook, Instagram, Android, and Chrome
Android phone users allege that Meta’s tracking pixel circumvented privacy protections to connect web-browsing activity with Facebook and Instagram accounts, while Google allegedly failed to prevent the tracking through…
T-Mobile · T-Mobile website and third-party online tracking technologies
Brittany Connor filed a putative class action in Los Angeles County Superior Court alleging that T-Mobile's website installed third-party tracking cookies and collected visitors' information even after they rejected or…
Chelan-Douglas Health District · Health district services and affected medical and personal information
A class-action lawsuit alleged that a 2021 cyberattack on the Chelan-Douglas Health District exposed medical and personal information belonging to roughly 188,000 people. The health district agreed to a $1.3 million set…
$1,300,000
The Walt Disney Company · Disneyland and Disney California Adventure facial recognition and biometric data collection
A class-action lawsuit filed against Disney alleges that Disneyland and Disney California Adventure Park do not adequately disclose their use of facial recognition technology or explain how guests' biometric data will b…
Disneyland · Facial recognition technology used at Disneyland
A Disneyland visitor filed a $5 million proposed class action alleging that the Anaheim theme park failed to properly disclose its use of facial recognition technology, violating visitors' privacy rights. The matter is…
Amazon · Amazon Fire TV devices and compatible third-party televisions using the Fire TV platform
A proposed nationwide class action filed in federal court alleges that Amazon used software embedded in Fire TV devices, including compatible third-party televisions, to collect detailed viewing and audiovisual activity…
Liberty Mutual · Insurance policies and policyholder personal information
Plaintiffs allege that Liberty Mutual failed to adequately safeguard the personally identifiable information of thousands of policyholders during a data breach. The class action is being litigated, although its specific…
T-Mobile · Mobile wireless services and customer data
Customers affected by T-Mobile’s 2021 data breach alleged that the company failed to adequately protect sensitive information. T-Mobile agreed in 2022, without admitting wrongdoing, to pay $350 million to settle the cla…
Superhuman · Grammarly Expert Review
A class action lawsuit alleges that Superhuman Mail's “expert” editing feature used the likenesses of journalists, scientists, and deceased public figures without their consent. The matter is described as ongoing litiga…
General Motors and LexisNexis · Connected-vehicle driving data, OnStar, and insurance-related data reports
Romeo Chicco filed a proposed class action alleging that General Motors and OnStar collected and shared driving data from his Cadillac XT6 with LexisNexis without his knowledge or consent, contributing to higher insuran…
Ford, General Motors, Honda, Toyota, and Volkswagen · Vehicle communications systems and drivers' private text messages and call logs
A class action alleged that Ford, General Motors, Honda, Toyota, and Volkswagen recorded and intercepted drivers' private text messages and call logs in violation of the Washington Privacy Act. A federal judge upheld di…
Fidelity Investments · Customer data and financial services
Fidelity Investments agreed to pay a $2.5 million settlement resolving a class action alleging that it failed to protect customer data during a cybersecurity breach in August 2024. The matter reached a settlement.
LinkedIn · LinkedIn browser-extension scanning
Plaintiff Jeff Ganan filed a proposed nationwide class action alleging that LinkedIn scans browser extensions and device characteristics used by Chrome-based browser visitors, links the information to members' identitie…
U.S. Department of Justice · Gender-affirming medical care and related patient health records
Eleven families with transgender children filed a class-action lawsuit in federal court in Maryland seeking to block the U.S. Department of Justice from obtaining medical records and related information concerning gende…
Apple · Apple products and iCloud
The Heat Initiative has brought a $1.2 billion class action lawsuit against Apple, alleging that the company failed to implement effective child-safety measures and policies in its products. The lawsuit is described as…
Funko · Funko website
Three California residents allege in a proposed class action that Funko collected and shared users' data through its website without permission. The complaint was filed in the U.S. District Court for the Western Distric…
Cushman & Wakefield · Commercial real estate brokerage and client services
A proposed class action filed in the Southern District of New York alleges that Cushman & Wakefield failed to adequately protect personal information belonging to current and former clients and tenants after a cyberatta…
Instructure · Canvas educational platform
A class action filed by a Florida resident alleges that Instructure and Dragoneer Investment Group failed to adequately protect users' personal information and failed to timely provide information about the April 29, 20…
American Lending Center · Small-business and investment financing services; personal information security
Edelson Lechtzin LLP is investigating a potential data-breach class action concerning American Lending Center's alleged failure to protect personal information exposed during a ransomware-related intrusion affecting app…
WHOOP · WHOOP fitness tracker, wearable device, and mobile app
The lawsuit alleges that WHOOP shared users' data with Segment, a third-party tracking tool embedded in the WHOOP app. The California class action is currently ongoing.
Canada Revenue Agency · Canada Revenue Agency website and Canada Emergency Response Benefit accounts
The class action alleged that inadequate security controls on the Canada Revenue Agency website allowed hackers to access and impersonate Canadians' accounts during the CERB application period, including by using stolen…
Canada Revenue Agency · Canada Revenue Agency online accounts and related tax and emergency-benefit services
The class action alleges that tens of thousands of Canada Revenue Agency online accounts were compromised in a 2020 cyberattack after criminals used usernames and passwords obtained from unrelated data breaches to acces…
Woflow · Woflow merchant data platform
A proposed consumer class action alleged that Woflow failed to implement reasonable cybersecurity measures to protect personal and financial information allegedly exposed in a cyberattack affecting users of its merchant…
Forbes Media · Forbes websites and online services
Forbes Media agreed to pay $10 million to settle a class-action lawsuit alleging that the publisher tracked users across the internet without their consent. The matter reached a settlement.
Chime · Financial services, including bank accounts and payment products
Consumers have filed a class-action lawsuit against Chime concerning an alleged April 2026 data breach affecting users of its financial services. The matter was newly filed, and its current procedural stage beyond filin…
Matthew Bathula · University of Maryland Medical Center computer systems and affiliated individuals' personal email, cloud storage, social media, and other online accounts
A class action filed in April 2025 alleges that former University of Maryland Medical Center pharmacist Matthew Bathula used stolen credentials, spyware, and other techniques to access personal accounts and conduct vide…
Target · Facial-recognition cameras and biometric data collection in Target stores
A putative class action filed in 2024 alleges that Target collected customers’ biometric information, including facial scans, without providing the disclosures required by the Illinois Biometric Information Privacy Act.…
NCH Corporation · NCH Corporation data systems
Murphy Law Firm is investigating potential class-action claims concerning an alleged NCH Corporation data breach that exposed individuals' personal and sensitive information. The procedural stage of the matter is not sp…
U.S. government · Office of Personnel Management personnel and security-clearance records
Plaintiffs in a class action alleged that the 2015 Office of Personnel Management data breaches exposed sensitive personal information of federal employees, contractors, applicants for security clearances, and their fam…
$63
Nelnet, OSLA, and Edfinancial · Student loan servicing and borrower account information
Plaintiffs alleged that Nelnet, OSLA, and Edfinancial failed to implement reasonable data-security measures after unauthorized access to certain student loan account registration information, affecting approximately 2.5…
$10,000,000
University of Maryland Medical Center · Hospital and medical-center computer systems and employee data
A proposed civil class action against University of Maryland Medical Center alleges that former pharmacist Matthew Bathula installed keylogging and spyware software on medical-center computers, obtained employees' crede…
General Motors and OnStar · OnStar in-vehicle services and GPS driving-data tracking
Consumers allege that General Motors collected driving behavior and vehicle data through OnStar programs and shared it with third parties without adequate disclosure or consent. In the consolidated litigation, a federal…
Mid America Physician Services · Obstetric and gynecological medical services and related patient data security
Patients in Missouri and Kansas brought a proposed class action alleging that Mid America Physician Services failed to adequately protect sensitive personal and medical information compromised in a 2024 data breach, cau…
Pawn America · Pawn shop services
Pawn America agreed to a proposed class-action settlement resolving allegations arising from a 2021 ransomware attack that exposed sensitive information belonging to at least 530,000 customers in Minnesota and Wisconsin…
$3,185,000
European Wax Center · Hair-removal salon services and website tracking technologies
A class action alleged that European Wax Center used pixels, cookies, code, and tracking or analytics tools on its website to disclose visitors' personal information to third parties without permission. European Wax Cen…
$10.00
JetBlue · Airline tickets and air travel services
A proposed class action alleges that JetBlue tracked passengers’ browsing activity, device type, location, or other personal data to assess willingness to pay and adjust airfare prices in real time. Plaintiffs seek dama…
Citizens Bank · Banking services and customer data
A class action lawsuit was filed against Citizens Bank alleging that a data breach affected a few thousand bank customers and exposed their personal information. The matter is at the filing stage.
Citizens Bank · Banking services and customer data
A second class action lawsuit was filed against Citizens Bank alleging that a data breach affected a few thousand bank customers and exposed their personal information. The matter is at the filing stage.
Constar Financial Services and Empereon Marketing · Financial and marketing services; data security
The settlement concerns allegations that a data breach involving Constar Financial Services and Empereon Marketing exposed class members' personal information. The matter reached a settlement, with eligible class member…
Mercor, Delve AI, and LiteLLM · AI-focused talent recruiting and AI-analyzed video interviews
A proposed federal class action alleges that Mercor, Delve AI, and LiteLLM negligently failed to protect personal information of workers and job applicants that was exposed in a March data breach. The suit also alleges…
Hasbro · Employee personal information and data security
A federal class action filed in Rhode Island alleges that Hasbro failed to adequately protect employees' and customers' personal information during a March 28, 2026 data breach and failed to provide timely notice and pr…
Class Action Signal is not a law firm and does not provide legal advice. These summaries describe public reporting; allegations are not findings of liability. A listing does not establish eligibility or guarantee compensation, attorney contact, or legal action.