Past settlements

Vintage Wine Securities Settlement

Vintage Wine Estates shareholders claim the company violated federal securities laws. Vintage Wine and the defendants deny the allegations and admit no wrongdoing. The company is paying $7.5 million to settle the securities class action lawsuit.

Paid Up to $0.79

Stitch Fix Securities Litigation Settlement

Stitch Fix, Inc. is accused of securities violations related to the sale of common stock. Lead plaintiffs on behalf of shareholders have reached a proposed $32,000,000 settlement to resolve all claims in the action.

Money Source TCPA Prerecorded Calls Settlement

The Money Source, Inc. allegedly placed prerecorded and artificial voice telephone calls to class members' cellular phones after they requested that the company stop calling. The company is accused of violating the Telephone Consumer Protection Act (TCPA). The Money Source denies wrongdoing and asserts it acted in good faith to comply with all relevant laws.

NJ Bureau of Securities Settlement with Credit Suisse

Credit Suisse allegedly violated New Jersey Securities Law by making materially false and misleading statements regarding RMBS trust certificates and engaging in fraudulent practices. On October 24, 2022, the court entered a consent order requiring Credit Suisse to pay $300 million in restitution to investors. Credit Suisse neither admitted nor denied the allegations.

Total Vision Data Breach Settlement

Total Vision experienced a data security incident on October 30, 2020, that exposed patients' and others' personal information. Plaintiffs claim Total Vision failed to adequately protect this information. Total Vision denies any wrongdoing and has not admitted to any violations.

Paid Up to $1,000

Healthcare Services Group Data Breach Settlement

Healthcare Services Group, Inc. suffered a cybersecurity data breach on or around September 27, 2024, which exposed employee personally identifiable information including names, Social Security numbers, driver's license numbers, state identification numbers, financial account details, full access credentials, and medical and health insurance information. HCSG denies any wrongdoing.

Paid Up to $5,000

ApolloMD Data Breach Settlement

A data security incident at ApolloMD on or around May 22, 2025, may have allowed an unauthorized third party to access files containing private information of patients treated by ApolloMD's affiliated physicians and practices. ApolloMD denies these claims and maintains it did nothing wrong.

Mercedes-Benz USA Approved Emission Modification Incentive Settlement

Mercedes-Benz settled with a coalition of state attorneys general regarding the design, manufacture, import, marketing, offer, sale, or lease of certain diesel vehicles. As part of the settlement, Mercedes-Benz is offering eligible owners and lessees $2,000 to incentivize installation of an Approved Emission Modification.

Paid Up to $2,000

Physicians' Primary Care Data Incident Settlement

Physicians Primary Care of Southwest Florida experienced a targeted cyberattack on its computer systems in September 2024. Certain files containing private information—such as names, Social Security numbers, and health information—were accessed. The defendant denies wrongdoing, but has agreed to settle the class action lawsuit to avoid ongoing litigation costs and risks.

Amy Crull v. University of St. Thomas Data Breach Settlement

University of St. Thomas experienced an unauthorized data breach between July 25, 2025 and August 12, 2025 that compromised personal information including credit card numbers, bank account information, Social Security Numbers, passports, licenses, work account logins and passwords, home addresses, email addresses, phone numbers, and other confidential documents. UST denies any wrongdoing.

Paid $50–$5,100

Central Valley Meat Co. Data Breach Settlement

Central Valley Meat Co's computer systems were compromised in May 2024, potentially exposing private information including names and Social Security numbers. Central Valley denies wrongdoing, and the parties agreed to settle to avoid ongoing litigation costs and risks.

Mount Sinai Data Breach Settlement

Mount Sinai Medical Center of Florida disclosed protected health information and personally identifying information of patients through tracking, analytics, and advertising technologies on its website and patient portal to third parties. The disclosure occurred between June 10, 2021 and September 18, 2025.

Paid Up to $20

Atrium Health Pixel Technology Settlement

Atrium Health improperly used pixel technology in connection with its MyAtriumHealth and MyCarolinas patient portal accounts. The health system has agreed to settle a class action lawsuit over this use of tracking technology without admitting wrongdoing.

Biogen Securities Litigation Settlement

Biogen Inc. is settling a securities class action lawsuit. Investors in Biogen common stock between June 8, 2021 and July 12, 2021 claim they were harmed. The company is paying $18.9 million to resolve the litigation without admitting wrongdoing.

Columbus Regional Health Data Breach Settlement

Columbus Regional Health allegedly disclosed patients' personal identifiable information (PII) and protected health information (PHI) to third-party technologies without patient consent. Columbus Regional denies wrongdoing but agreed to the settlement to avoid litigation costs and uncertainty.

Paid Up to $25.50

Naper Grove Data Breach Settlement

Naper Grove Vision Care, P.C. experienced a targeted cyberattack on its computer systems in May 2025. Files containing private information were accessed, including names combined with Social Security numbers and other non-public personally identifiable information. Naper Grove denies wrongdoing, and the parties have agreed to settle to avoid further litigation costs and risks.

Patton v Trinity Settlement - Oil and Gas Royalty Payments

Trinity Operating (USG) LLC allegedly failed to pay statutory interest on late payments to oil and gas producers in Oklahoma under the Producers' Royalty Settlement Act. The defendant denies wrongdoing but agreed to settle to avoid litigation costs and uncertainty.

Paid Determined by Allocation Methodology (not specified on page)

Aspire Health Alliance Data Breach Settlement

Aspire Health Alliance suffered a targeted cyberattack on its computer systems in September 2023 that potentially exposed certain files containing private information including names, dates of birth, medical service dates, insurance policy numbers, physician information, medical conditions or treatment information, and Medicare or Medicaid numbers. Aspire denies wrongdoing, and the parties settled to avoid the costs and uncertainties of continued litigation.

Perry v. Alatrade Foods WARN Act Settlement

Alatrade Foods allegedly violated the federal Worker Adjustment and Retraining Notification Act (WARN Act) by failing to provide at least 60 days' advance notice before a mass layoff or plant closing at its Phenix City, Alabama facility between February and August 2025. The defendant denies all allegations and liability.

Paid Back pay consisting of 100% of wages (with standard payroll taxes withheld)

American Consumer Credit Counseling Data Breach Settlement

In January 2025, a criminal third party gained unauthorized access to certain employee email accounts at American Consumer Credit Counseling, Inc. (ACCC). The breach resulted in the potential exposure of personally identifiable information including names, Social Security numbers, driver's license numbers, financial account numbers, and payment card information. ACCC denies wrongdoing and liability, and the court has made no determination of liability.

Murphy v. Western Montana Clinic Data Breach Settlement

Western Montana Clinic experienced a data breach between March 11, 2025, and April 15, 2025, in which an unauthorized third party accessed a WMC employee email account containing personal health information of individuals.

Schuster Company Data Breach Settlement

In January 2024, Schuster Company experienced a cybersecurity incident involving their computer systems where certain files containing personal information may have been accessed. The stolen data potentially included names, Social Security numbers, dates of birth, and driver's license numbers or state identification information. Schuster denies any wrongdoing, and the parties settled to avoid continued litigation costs and risks.

Heckathorn TCPA Settlement

Insurance agents working for Farmers Insurance allegedly made telemarketing calls and sent text messages marketing Farmers insurance to phone numbers registered on the National Do-Not-Call Registry, violating the federal Telephone Consumer Protection Act.

Paid Up to $160

Comcast Data Breach Settlement

In October 2023, a third-party gained unauthorized access to Comcast customers' personal information in a cybersecurity incident. Comcast denies that it engaged in any wrongdoing or violated any law.

Paid Cash payments to Settlement Class Members, reimbursement for documented out-of-pocket losses and lost time, and Identity Defense Services and Restoration Services

STIIIZY Data Breach Settlement

STIIIZY, Inc. experienced a data breach in October 2024 where personal information and private health information was allegedly accessed, compromised, or stolen from the company's servers. The breach was announced on January 7, 2025. STIIIZY denies the allegations and all liability.

Hunley v. Pineland Community Service Board Data Breach Settlement

A cybersecurity incident involving Pineland Community Service Board occurred from November 2024 to January 2025, resulting in potentially unauthorized access to or acquisition of settlement class members' private information. The defendant denies any wrongdoing or liability, but has agreed to settle the lawsuits to avoid the risk, cost, and time of continuing litigation.

Lemonade Data Disclosure Settlement

Lemonade, Inc. and Lemonade Insurance Agency, LLC experienced an unauthorized data exposure involving their online insurance quote platform between April 2023 and September 18, 2024. Personal information such as driver's license numbers was compromised, and affected individuals were notified in April and June 2025.

Parks Heritage Federal Credit Union Data Breach Settlement

Parks Heritage Federal Credit Union suffered a targeted cyberattack in July 2024 that accessed files containing private member information including names, Social Security numbers, financial information, and credit card/debit card numbers. Parks Heritage denies wrongdoing, and the parties have agreed to settle the lawsuit to avoid the costs and uncertainties of continuing litigation.

Allina Pixel Settlement

Allina Health System allegedly disclosed certain personal or health-related information to third parties. The defendant denies these allegations but agreed to settle the class action lawsuit.

Biddle v. Disney Class Action Settlement

Disney allegedly violated federal antitrust law and state antitrust and consumer-protection laws by engaging in conduct to raise prices of streaming live pay television services, causing damages to YouTube TV and DirecTV Stream subscribers. Disney denies any wrongdoing but has agreed to settle.

Paid Pro rata cash payment proportional to the length of your YouTube TV and/or DirecTV Stream subscription

Hill v. BrandSafway Services Class Action Settlement

Plaintiff Jeffrey Hill sued BrandSafway and related companies, alleging that their job postings for open positions in Washington failed to disclose wage and/or benefits information as required. The defendants dispute the claims and contend they have not violated any law. The lawsuit is pending in King County Superior Court, and a settlement has been proposed pending court approval.

Paid Up to $1,632.11

Banner Health Data Breach Settlement

Banner Health allegedly disclosed patients' personally identifiable information and protected health information to third parties including Meta (Facebook) and Google through tracking technologies on its website and patient portal. This allegedly violated patients' privacy rights and applicable laws. Banner denies all wrongdoing.

Paid Up to $20

Lucent Health Solutions Data Breach Settlement

Lucent Health Solutions, LLC suffered a targeted cyberattack in October 2023 that compromised certain computer systems. Files containing private information such as names, dates of birth, health/dental/vision policy numbers and member IDs, and plan numbers may have been accessed. The defendant denies wrongdoing.

Calverton Park Vehicle Towing Settlement

The City of Calverton Park towed vehicles from private property and charged owners fines and fees, including special tax bills, alleging violations of a municipal nuisance ordinance. The defendants deny any wrongdoing or liability.

Paid The amount of your payment will depend on whether you were able to recover your vehicle from the tow lot; the number of days your vehicle was impounded before release; and the total costs of fines and fees, including the Special Tax Bill, you paid to the City of Calverton Park or the tow lot.

Holsapple v. Reactor Inc. (Vertical Hold) Settlement

Vertical Hold Rock Climbing Gym allegedly excluded male and non-binary customers from paying for women's and ladies' clinics, classes, or events between 2017 and 2020. The defendants agreed to settle this class action lawsuit by providing compensation to eligible class members.

Paid Four day passes to Vertical Hold

Omni Healthcare Data Breach Settlement

In January 2024, an unauthorized third party conducted a cyberattack on Omni Healthcare's network and accessed certain files containing personal and medical information. The accessed files may have contained names, dates of birth, medical information, Social Security numbers, health insurance information, and financial account information. Omni Healthcare denies wrongdoing, and the parties agreed to settle to avoid the costs and uncertainties of continued litigation.

Labcorp Data Breach Settlement

Labcorp allegedly suffered a data breach involving customer diagnostic services information through American Medical Collection Agency. The company has agreed to settle for $35 million related to this alleged security breach.

Abbott Laboratories Employees Credit Union Data Breach Settlement

Abbott Laboratories Employees Credit Union ("ALEC") experienced a targeted cyberattack on its computer systems in August 2024. Files containing private information such as names, financial account information, and Social Security numbers were accessed. ALEC denies wrongdoing, and the parties agreed to settle to avoid the costs and risks of ongoing litigation.

Circle K (Gas Express) Data Breach Settlement

Circle K experienced a targeted cyberattack on its computer systems in May 2024 in which certain files containing private information were accessed. These files may have contained personal information such as names and Social Security numbers. Circle K denies that it did anything wrong, and the parties agreed to settle to avoid ongoing litigation costs and uncertainties.

Okanogan Behavioral Healthcare Data Breach Settlement

Okanogan Behavioral Healthcare (OBHC) experienced an unauthorized data incident discovered in May 2024 that exposed sensitive patient information including names, addresses, dates of birth, Social Security numbers, driver's license numbers, identification numbers, and medical and health insurance information. OBHC denies any wrongdoing.

Paid $50–$5,350

MOVEit Data Breach Settlement - GRIPA

In May 2023, Greater Rochester Independent Practice Association suffered a data breach involving MOVEit Transfer file transfer software. The breach exposed personally identifiable information and protected healthcare information of individuals, including names, dates of birth, Social Security numbers, health information, and insurance details. GRIPA is settling claims related to this breach, though litigation against Progress Software Corporation (the MOVEit software licensor) continues.

Paid $100–$12,500

Kaplan v. Crimson Wine Group Data Breach Settlement

Crimson Wine Group, Ltd. suffered a targeted cyberattack on its computer systems in or about June 2024. Certain files containing private information were accessed, potentially including names, Social Security numbers, and financial account information. The company denies wrongdoing.

Equifax Double-Reporting Error Settlement

Equifax wrongfully reported duplicate negative collection accounts on credit reports, making collection balances appear larger than they actually were. This violated the Fair Credit Reporting Act's requirement that credit reporting companies use reasonable procedures to ensure accurate information. The credit bureau has agreed to a $2.2 million settlement to resolve the class action lawsuit.

Paid Up to $600

Equifax Duplicate Reporting Settlement

Equifax allegedly violated the Fair Credit Reporting Act by wrongfully reporting duplicate negative accounts on consumer credit reports, with inadequate data-keeping policies. These duplicated debt tradelines made some customers' debts appear larger than they actually were, potentially preventing them from securing loans, credit cards, mortgages and other lines of credit. Equifax denies wrongdoing.

Paid Up to $600

Bradberry v. Equifax Information Services LLC - Duplicate Collection Accounts Settlement

Equifax allegedly reported the same collection account more than once on consumer credit reports, which the lawsuit claims violates the federal Fair Credit Reporting Act (FCRA). Equifax denies wrongdoing, and the parties agreed to settle to avoid further litigation costs.

AOD Federal Credit Union Data Breach Settlement

AOD Federal Credit Union experienced unauthorized access to its network from August 8-9, 2024, resulting in potential exposure of members' personally identifiable information including names, Social Security numbers, dates of birth, bank account numbers, credit card numbers, government IDs, health insurance information, and tax identification numbers. The defendant denies any wrongdoing.

Paid $75–$5,000

Serviceaide Data Breach Settlement

Serviceaide, Inc. experienced unauthorized access to its computer systems and network between September 19, 2024, and November 5, 2024, which exposed the private information of current and former patients of Catholic Health. The lawsuit alleges negligence, breach of implied contract, unjust enrichment, and invasion of privacy. The defendant denies all wrongdoing.

Malik Tucker v. King County Settlement

King County detained people at the King County Jail for more than 48 hours without a probable cause determination between January 2, 2021, and April 23, 2025. The lawsuit challenged these detention practices, and King County agreed to pay compensation to affected individuals.

Paid $150–$1,500

FMC Services Data Breach Settlement

FMC Services, LLC experienced a data incident on or about July 26, 2022, in which an unauthorized third party compromised personally identifiable information and personal health information of class members. The company denies that any information had been acquired.

Urban One Data Breach Settlement

Urban One's computer systems were targeted in a cyberattack in March 2025, resulting in unauthorized access to files containing personal information such as identifying information or information that could be used to identify, locate, or contact individuals. Urban One denies any wrongdoing.

FitOn VPPA Settlement

FitOn allegedly disclosed its subscribers' personally identifiable information to third parties without consent and in violation of the Video Privacy Protection Act (VPPA). The defendant denies it violated any law.

Paid Up to $10

Call-On-Doc Pixel Settlement

Call-On-Doc used third-party tracking technologies called "tracking pixels" on its web pages. Plaintiffs alleged this use violated certain California laws. Call-On-Doc denies wrongdoing, and the parties agreed to settle to avoid litigation costs and uncertainty.

Revance Securities Settlement

Revance Therapeutics and its executives made material misrepresentations and omissions regarding the company's relationship with Teoxane SA and the tender offer and merger transaction with Crown Laboratories, Inc., allegedly violating federal securities laws. Defendants deny any wrongdoing or liability.

Paid Not yet determinable; depends on number of valid claims submitted

LVGP 2023 Ticket Settlement

Defendants delayed the FP2 Free Practice Session scheduled for November 16, 2023, and subsequently revoked class members' admission without cause before the session began. Class members alleged they were entitled to partial refunds of their ticket price for the 2023 Las Vegas Grand Prix. Defendants deny all allegations of wrongdoing and admit no liability.

Berman & Rabin Data Breach Settlement

Berman & Rabin, P.A. experienced a cyberattack on its computer systems in July 2024 (the "Data Incident"). Certain files containing private information were potentially accessed, including names, Social Security numbers, drivers' license numbers, financial information, medical information, and health insurance information. Berman & Rabin denies any wrongdoing, but the parties agreed to settle to avoid costs and risks of continued litigation.

Henderson & Walton Women's Center Data Breach Settlement

Unauthorized actors accessed Henderson & Walton Women's Center's computer systems containing personal information and protected health information between February 11 and February 14, 2022. Henderson has agreed to provide settlement benefits to affected individuals as a result of this cybersecurity incident.

BMW Shark Fin Antenna Sealing Defect Settlement

BMW manufactured certain 2019-2020 BMW X3, X4, X5, X6, and X7 vehicles with a shark-fin antenna that had sealing defects. The settlement requires BMW to reimburse owners and lessees for past repair costs related to this defect and extend the New Vehicle Limited Warranty coverage for the sealing defect.

Paid Reimbursement for eligible past Sealing-Defect Repair expenses and extension of New Vehicle Limited Warranty

KYB Americas Corporation Data Incident Settlement

In February 2025, KYB Americas Corporation experienced a targeted data security incident on its computer systems. Certain files containing personal information were potentially accessed. KYB denies doing anything wrong, and the court has not decided who is right.

Backchecked Data Breach Settlement

Backchecked, LLC suffered a targeted cyberattack on its computer systems in September 2024. Files containing private information including names, addresses, dates of birth, Social Security numbers, and driver's license numbers may have been accessed. Backchecked denies any wrongdoing.

Hillcrest Convalescent Center Data Breach Settlement

Hillcrest Convalescent Center, Inc. experienced a cyberattack on its computer systems in June 2024 that may have resulted in unauthorized access to and acquisition of sensitive personal information including names, addresses, financial account information, dates of birth, driver's license numbers, Social Security numbers, government ID numbers, medical treatment records, health insurance information, and provider information. Hillcrest denies wrongdoing and the court has not decided the merits; the parties settled to avoid litigation costs and uncertainties.