Data Breach

April 10, 2025 Evolve Bank & Trust has agreed to pay an $11.9 million settlement to resolve multidistrict litigation over a 2024 data breach.

April 9, 2025 MarineMax has agreed to pay a nearly $1.02 million settlement to resolve a class action over a March 2024 data breach.

April 4, 2025 A $3.15 million settlement has been reached to resolve a class action that alleged negligent cybersecurity on Azura's part resulted in a data breach in 2023.

March 31, 2025 Hi-School Pharmacy has agreed to pay a $600,000 settlement to resolve a class action over a November 2023 data breach.

March 31, 2025 Thriving Mind South Florida has agreed to pay a $900,000 class action settlement to resolve allegations that the nonprofit was liable for an August 2023 data breach.

March 28, 2025 Ex-University of Michigan football coach Matthew Weiss faces a class action for allegedly hacking the private accounts of student athletes.

March 27, 2025 Floridacentral Credit Union has agreed to resolve a lawsuit that claimed the credit union's negligent cybersecurity resulted in an April 2024 data breach.

March 26, 2025 Tyler has agreed to pay a settlement to resolve a class action that alleged the company failed to protect personal information during a 2024 data breach.

March 25, 2025 Infosys McCamish Systems has agreed to pay a $17.5 million settlement to wrap up class action lawsuits over a 2023 data breach.

March 18, 2025 Apria has agreed to pay a more than $6.3 million settlement that may resolve a class action lawsuit over two cyberattacks that occurred in 2019 and 2021.

March 17, 2025 A class action settlement has been reached to resolve a lawsuit filed over a cyberattack discovered by the City of Oakland in February 2023.

March 17, 2025 Stanley Steemer has agreed to pay a $700,000 settlement to resolve a class action filed after cybercriminals allegedly hacked into the company’s network.

March 10, 2025 LoanDepot has agreed to pay more than $86 million to settle a class action that claimed negligent cybersecurity was to blame for a January 2024 data breach.

March 7, 2025 A $1.5 million settlement has been reached to resolve a class action filed over a data breach experienced by One Brooklyn Health System, Inc. in 2022.

March 5, 2025 Harvard Pilgrim Health Care has agreed to pay a $16 million settlement that, if approved by the court, will resolve a class action over a 2023 ransomware attack.

March 5, 2025 United of Omaha has agreed to pay a settlement to resolve a class action over a 2024 data breach that compromised the personal information of clients’ current and former employees.

March 5, 2025 Rite Aid has agreed to pay $6.8 million to settle a proposed class action lawsuit over a 2024 data breach that impacted around 2.2 million people.

March 4, 2025 Dameron Hospital has agreed to pay a $650,000 settlement to resolve a class action over a 2023 data breach that compromised the personal information of 262,475 people.

March 3, 2025 Stratford University has agreed to pay a $580,000 settlement to resolve a class action that alleged negligent cybersecurity on the part of the private college resulted in two data breaches.

February 25, 2025 Arietis Health has agreed to pay $2,800,000 to settle a class action filed on behalf of those impacted by a 2023 data breach involving MOVEit.

February 24, 2025 UNITE HERE has agreed to pay a $6 million settlement to resolve a class action that claimed the labor union failed to protect personal information during a 2023 data breach.

February 18, 2025 Fred Hutchinson Cancer Center has agreed to pay an $11,500,000 settlement to end a class action lawsuit over a November 2023 cyberattack.

February 14, 2025 A class action against Elon Musk alleges taxpayers, federal employees and those receiving benefits should be compensated for DOGE's access to their personal and financial data.

February 7, 2025 A settlement has been reached to resolve a class action that claimed AUS failed to protect consumers’ personal data during a November 2022 cyberattack.

February 6, 2025 A settlement has been reached to resolve a class action that alleged Drug Free Workplaces failed to prevent a 2023 data breach.

February 5, 2025 A $387,500 settlement has been reached to resolve a class action that claimed negligent cybersecurity on Bassett's part resulted in a years-long data breach discovered in 2023.

January 31, 2025 Rise has agreed to pay a $427,500 settlement to resolve a class action that alleged the company failed to protect the data of 54,509 people during a 2022 cyberattack.

January 30, 2025 Mulkay Cardiology Consultants has agreed to settle a class action lawsuit filed over a September 2023 data breach.

January 30, 2025 MGM has agreed to pay a $45 million settlement to resolve class action lawsuits over separate data breaches that occurred in July 2019 and September 2023.

January 28, 2025 A $3.25 million settlement has been reached to resolve a class action that alleged negligent data security practices on the part of Progressive resulted in a years-long data breach.

January 24, 2025 Nonstop has agreed to pay a $1.6 million settlement to resolve a class action that alleged the insurer failed to protect the personal information of 8,500 people during a December 2022 data breach.

January 23, 2025 Professional Finance Company has agreed to pay $2,500,000 to settle a class action lawsuit over a February 2022 data breach.

January 23, 2025 Enzo Biochem has agreed to pay a $7.5 million settlement that, if approved by the court, will resolve a class action over an April 2023 cyberattack.

January 22, 2025 Berry, Dunn, McNeil & Parker has agreed to pay a $7,250,000 settlement to resolve a class action that alleged the firm was liable for a September 2023 data breach.

January 21, 2025 DC Health Link has agreed to pay a $1,450,000 settlement to resolve a class action filed over a data breach that may have impacted as many as 254,388 individuals.

January 17, 2025 A settlement has been reached to resolve a class action that alleged Vi failed to safeguard consumers’ personal data during a March 2023 cyberattack.

January 16, 2025 Hapy Bear Surgery Center has agreed to pay $607,500 to settle a class action filed over a data breach that targeted the dental clinic in December 2023.

January 15, 2025 A $4.3 million settlement has been reached to resolve a class action that alleged Upstream Rehabilitation left patients’ private information vulnerable to cybercriminals.

January 13, 2025 Eskenazi Health has agreed to pay $2.5 million to settle a class action filed over a May 2021 data breach that reportedly impacted 160,000 patients and employees.

January 10, 2025 MU Health Care has agreed to pay an $8 million settlement to resolve a class action that claimed the medical provider failed to protect personal data during a May 2020 data breach.

January 7, 2025 Tampa General Hospital has agreed to pay a $6.8 million settlement to resolve a class action over a May 2023 data breach that impacted approximately 2.1 million people.

January 7, 2025 A class action claims Ingo Money's negligent cybersecurity resulted in a 2023 data breach that compromised the information of clients’ customers.

January 2, 2025 HanesBrands has agreed to pay $475,000 to settle a class action filed on behalf of employees who had their private information exposed during a data breach.

December 23, 2024 PRGX has agreed to settle a class action filed on behalf of more than 13,000 people who had their private information exposed during an April 2022 data breach.

December 20, 2024 The USAA has agreed to pay a $3.25 million settlement that, if approved by the court, will resolve a class action over a May 2021 data breach.

December 20, 2024 A $750,000 settlement has been reached to resolve a class action lawsuit filed over a data breach experienced by the Loren D. Stark Company in 2022.

December 18, 2024 Automation Personnel Services faces a class action over a November 2020 data breach that reportedly compromised employees’ personal information.

December 13, 2024 A settlement has been reached to resolve a class action that claimed Nucor failed to protect employees' personal information during a 2023 data breach.

December 13, 2024 Columbus Regional Healthcare System has agreed to pay $1.1 million to settle a class action that claimed negligent cybersecurity was to blame for a May 2023 data breach.

December 13, 2024 Kaye-Smith has agreed to pay a $2 million settlement to resolve a class action that claimed the company failed to protect personal information during a 2022 cyberattack.