California Consumer Privacy Act

March 10, 2025 LoanDepot has agreed to pay more than $86 million to settle a class action that claimed negligent cybersecurity was to blame for a January 2024 data breach.

March 4, 2025 Dameron Hospital has agreed to pay a $650,000 settlement to resolve a class action over a 2023 data breach that compromised the personal information of 262,475 people.

January 24, 2025 Nonstop has agreed to pay a $1.6 million settlement to resolve a class action that alleged the insurer failed to protect the personal information of 8,500 people during a December 2022 data breach.

January 23, 2025 Professional Finance Company has agreed to pay $2,500,000 to settle a class action lawsuit over a February 2022 data breach.

January 7, 2025 A class action claims Ingo Money's negligent cybersecurity resulted in a 2023 data breach that compromised the information of clients’ customers.

November 14, 2024 A settlement has been reached to resolve a class action that alleged negligent cybersecurity on the part of Ardagh Glass resulted in a 2021 data breach.

November 12, 2024 A settlement has been reached to resolve a class action that alleged Oak Valley Hospital failed to prevent a 2023 data breach.

October 17, 2024 Arthur J. Gallagher & Co. and Gallagher Bassett Services face a class action over a data breach that reportedly occurred between June and September 2020.

August 29, 2024 A class action alleges Capital One illegally tracked, shared and monetized website users’ private information without their knowledge or consent.

July 19, 2024 A class action claims Ingo Money's negligent cybersecurity resulted in a 2023 data breach that compromised the information of clients’ customers.

June 18, 2024 A class action alleges Amerit failed to protect the private data of more than 1,900 employees during a cyberattack announced in April 2024.

June 3, 2024 Ticketmaster faces a class action lawsuit after Live Nation confirmed that the ticket seller was hit by a data breach in May 2024.

May 7, 2024 CNU faces a class action over a February 2023 cyberattack during which hackers gained access to highly sensitive employee and student data.

April 18, 2024 City of Hope has been hit with a class action over a 2023 cyberattack that compromised the private data of approximately 827,000 patients.

April 5, 2024 Crossroads Equipment Lease & Finance has been hit with a class action over a targeted cyberattack that reportedly occurred in early April 2023.

March 19, 2024 A class action lawsuit alleges Epic Games has illegally tracked the personal information of Fortnite players under 13 and exploited the data for commercial gain.

February 28, 2024 A lawsuit alleges Western Union and MoneyGram have illegally swept up and disclosed to a law enforcement education group the transaction data of millions consumers from certain states.

February 21, 2024 Washington National faces a class action over a cyberattack announced in January 2024 that compromised the personal data of more than 20,000 people.

February 8, 2024 Keenan & Associates faces a class action over an August 2023 cyberattack that compromised the personal and medical data of more than 1,500,000 people.

February 7, 2024 Chuze Fitness has been hit with a class action over a November 2023 cyberattack that compromised the personal data of current and former employees.

February 7, 2024 Arizona Labor Force faces a class action that claims deficient data security resulted in the unauthorized disclosure of current and former employees’ personal data.

October 19, 2023 Prospect Medical Holdings, Inc. faces a class action that claims the healthcare corporation failed to protect private employee and patient data during an August 2023 cyberattack.

September 28, 2023 Amerita, Inc. faces a class action that claims the company failed to protect consumers’ personal information during a cyberattack reportedly discovered in March 2023.

September 11, 2023 Tesla Motors, Inc. faces a class action over an apparent data breach the automaker said was caused by two ex-employees.

May 18, 2023 A class action lawsuit claims Weee!, a major online Asian and Hispanic grocery delivery startup, failed to protect the personal information of at least 1.1 million customers during a February 2023 data breach.

March 6, 2023 A class action lawsuit claims the negligence of four major healthcare networks in Southern California resulted in a “foreseeable” data breach that compromised the personal information of over three million patients.

February 7, 2023 A class action claims Cedars-Sinai Health System and subsidiary Cedars-Sinai Medical Center secretly transmit without consent and to numerous third parties the personal data of Cedars-Sinai.org visitors.

May 5, 2022 The Neiman Marcus Group faces a class action that alleges the retailer’s “inadequate cybersecurity” is to blame for a 2020 data breach.

May 4, 2022 American Financial Resources faces a class action over a Dec. 2021 data breach in which the information of thousands of the residential mortgage company’s customers was accessed.

December 8, 2021 Ally Bank faces a lawsuit over an April 2021 data breach in which customers’ usernames and passwords were exposed to the bank’s third-party business associates.

September 21, 2021 A class action has been filed over an alleged UC San Diego Health data breach in which hackers reportedly gained unauthorized access to employees’ email accounts.

July 30, 2021 Arthur J. Gallagher & Co. and Gallagher Bassett Services face a class action over a data breach that reportedly occurred between June and September 2020.

July 26, 2021 Waste Management faces a class action over a January 2021 data breach that reportedly affected over 268,000 employees, former employees and their dependents.

July 22, 2021 A class action claims Bank of America failed to protect the security of debit cards issued to California unemployment benefits recipients.

April 21, 2021 Bank of America faces another class action that claims the financial institution has lacked urgency in securing unemployment benefits for Californians amid the COVID-19 pandemic.

April 9, 2021 Infinity Insurance Company and parent Kemper Corporation have been named in a proposed class action over a reported late-December 2020 data breach.

January 19, 2021 A lawsuit alleges Bank of America failed to prevent and address fraud involving unemployment insurance benefits provided through prepaid debit cards in California.

November 11, 2020 Dickey's Barbeque Pit faces a class action over a months-long data breach that reportedly affected around three million credit card numbers.

September 18, 2020 A class action claims Instagram, in contrast to its privacy assurances, has "constantly" accessed users' smartphone cameras while the app is open, and monitored the individuals without consent.

August 28, 2020 A proposed class action alleges Apple has knowingly sold gift cards susceptible to an ongoing scam whereby funds are fraudulently redeemed by third parties.

August 7, 2020 A class action claims Google has secretly monitored, collected and misused the personal data of millions of Android users to get a leg up on competitors TikTok, Facebook and Instagram.

July 28, 2020 Online dating service Zoosk and its parent co. face a class action over a May 2020 data breach that supposedly compromised the information of more than 30 million users.

July 15, 2020 A class action alleges "severe vulnerabilities" found in Walmart's websites have allowed hackers to access customers' personal information.

June 15, 2020 Minted faces a class action that claims its “inadequate security systems” allowed a hacking group to access customers’ personal information in a May 2020 data breach.