Past settlements

York County School of Technology Data Breach Settlement

On March 27, 2023 and April 26, 2023, cyber criminals gained unauthorized access to York County School of Technology's network, exfiltrating Settlement Class Members' Private Information including full names, addresses, Social Security numbers, and Driver's Licenses or State IDs. The defendant is settling claims arising from this data breach.

Paid $45–$5,000

Whole Foods Market 401(k) Plan ERISA Settlement

Plaintiffs allege that Plan fiduciaries allowed the Whole Foods Market 401(k) Plan to pay higher recordkeeping and administrative fees than necessary. Plaintiffs also alleged that Whole Foods and the Board failed to monitor the Plan's fiduciaries. The defendants deny all allegations and assert their conduct was entirely proper and compliant with all applicable laws.

Jones v. Tapestry, Inc. - Job Application Wage Disclosure Settlement

Tapestry, Inc. allegedly violated Washington law by not disclosing wage scales, salary ranges, or general descriptions of benefits and compensation in job postings for open positions in Washington. Tapestry denies all claims and contends it is not liable.

Paid $793.79–$5,000

Seattle Housing Authority Data Breach Settlement

In October 2023, cybercriminals conducted a cyberattack on the Seattle Housing Authority and potentially accessed and/or acquired files containing individuals' personal information. The Seattle Housing Authority denies all claims and denies wrongdoing, but has agreed to settle the case.

Witham Memorial Hospital Patient Portal Data Breach Settlement

The hospital disclosed confidential personally identifiable information and protected health information to third-party technologies without patient consent. The hospital denies all claims and maintains it did nothing wrong but agreed to settle to avoid the expense and burden of continued litigation.

Paid Up to $25

Aladdin Food Management Services Wage Disclosure Settlement

Defendants allegedly failed to disclose required wage/salary information and benefits in job postings in Washington in violation of state law. Defendants dispute these claims and the court has not determined the merit of the allegations.

Paid Minimum Settlement Fund of $795,147.25 to Maximum Settlement Fund of $1,261,000.00, depending on the number of valid claims

Jefferson Healthcare Pixel Settlement

Jefferson Healthcare allegedly implemented and used Meta Pixel and similar tracking technologies on its website without proper disclosure of website usage. The defendant denies the allegations and admits no wrongdoing, but agreed to settle to avoid the expense and burden of continuing the case.

Paid A twelve (12)-month subscription voucher for the CyEx Privacy Shield product

Pentegra 401(k) Settlement

Participants in the Pentegra Defined Contribution Plan for Financial Institutions have filed a class action lawsuit against the Board of Directors. The settlement resolves claims related to the plan's administration, though specific allegations are not detailed on this page.

Keurig K-Supreme Coffee Maker Settlement

Keurig's K-Supreme, K-Supreme Plus, and K-Supreme SMART single-serve coffee makers allegedly had a defect that caused the machines to suddenly and permanently lose power during the descaling process when descaled according to Keurig's instructions. Keurig denies all allegations and admits no wrongdoing, but agreed to settle the case by establishing a settlement fund and providing extended warranties.

Paid Up to $250

Canteen Vending Machine Overcharge Settlement

Compass Group USA, Inc. (Canteen) allegedly charged consumers more than the displayed price for items purchased from certain vending machines when customers used credit, debit, or prepaid cards, without disclosing the extra card-use charges to consumers.

Paid $30–$360

GPB Securities Settlement

This is a securities class action settlement against five audit and consulting firms (CohnReznick LLP, Crowe LLP, Margolin, Winer & Evens LLP, RSM US LLP, and WithumSmith+Brown, PC). The defendants have agreed to settle the lawsuit with final court approval granted on November 24, 2025.

Hospital Sisters Health System Data Breach Settlement

Hospital Sisters Health System suffered a targeted cyberattack on its computer systems in August 2023, in which certain files containing personally identifiable information and personal health information were accessed. The defendant denies wrongdoing and has agreed to settle the lawsuit to avoid costs, risks, and uncertainties of continuing litigation.

CareDx Securities Litigation Settlement

CareDx, Inc. and other defendants agreed to settle a securities class action lawsuit. The settlement resolves claims that class members were damaged by their purchases of CareDx common stock. The defendants agreed to pay $20,250,000 to settle the case.

Paid Unable to determine at this time; depends on number of valid claims submitted

Hillbom v. Dignity Health Data Breach Settlement

An unauthorized third party may have accessed personal identifying information (PII) and/or protected health information (PHI) of current and former patients of Dignity Health. The lawsuit alleges that the defendants failed to adequately protect this sensitive patient data.

Paid Up to $2,500

Panera Data Security Settlement

Panera discovered a security incident on March 23, 2024, where an unauthorized third party gained access to certain information including names and Social Security Numbers of Panera's current and former employees, as well as a small number of customers, contractors, and other individuals. Panera denies wrongdoing and liability but has agreed to settle the lawsuit on a classwide basis.

Paid Up to $7,100

Metairie Towers Condominium Class Action Settlement

The Metairie Towers Condominium Association allegedly wasted and misallocated insurance proceeds collected from the Hurricane Ida settlement and a September 28, 2021 water damage event. The settlements resolve claims against multiple insurance companies for this misallocation of funds.

Francesca's Data Breach Settlement

Francesca's suffered a data breach that compromised customers' personal information. Data breach notices were sent to affected individuals on or after September 25, 2023. The defendant denies any wrongdoing. However, the defendant has filed for bankruptcy, and the settlement will not move forward at this time—no settlement payments will be made and there will be no recovery to class members.

Paid $50–$5,000

Baybrook Village Apartments Settlement

Two lawsuits alleged that Baybrook Village violated Texas law by improperly collecting water and sewer fees and rent late fees from tenants. The defendants deny all wrongdoing but agreed to settle to avoid the costs and risks of continuing litigation.

Cupertino Electric Data Breach Settlement

Cupertino Electric, Inc. suffered a data breach that impacted customers. The company is settling a class action lawsuit by providing credit monitoring, reimbursement for documented losses, and pro rata cash payments to affected individuals. The defendant does not admit wrongdoing.

Paid Up to $5,000

GM Fuel Pump Settlement

General Motors equipped certain 2011-2016 Duramax diesel Chevrolet Silverado and GMC Sierra trucks with a CP4 fuel pump that allegedly failed prematurely. Owners and former owners paid for repairs or experienced losses when they sold their trucks. GM has agreed to settle by paying cash compensation to affected class members and providing reimbursement for future repairs.

Paid Cash payment for CP4 fuel pump repairs paid out of pocket; cash payment for former owners who no longer own their trucks; 50% reimbursement for future CP4 fuel pump repairs performed on or after May 6, 2025

Archibeque v. FPI Management, Inc. Data Breach Settlement

FPI Management, Inc. experienced a cyberattack in August 2020 where unauthorized third parties gained access to files containing personal information of residents of properties FPI managed. The exposed data included names, addresses, dates of birth, Social Security numbers, driver's license numbers, passport numbers, tax identification numbers, financial account information, online credentials, and medical information. The plaintiff claims FPI was responsible for the increased risk of identity theft resulting from this incident.

Paid $100–$4,250

Weirton Medical Center Data Breach Settlement

Weirton Medical Center experienced a data incident in which the personal information of patients—including names, Social Security numbers, and medical bill balances—was potentially accessed or compromised. The company is settling class action claims arising from this breach.

Shapermint Pricing Settlement

Favorite World, LLC is settling a class action lawsuit. Settlement class members will receive voucher compensation that can be used on the Shapermint website.

Paid $6–$12

WebTPA Data Incident Settlement

Defendants sent notification to persons in the United States that their Private Information was potentially compromised as a result of a data incident. The defendants deny all liability or wrongdoing but have agreed to settle to avoid the costs and expenses of further litigation.

Paid $100–$5,150

Avfuel Data Breach Settlement

Avfuel Corp. suffered a targeted cyberattack on its computer systems in January 2024 that compromised private information, including names and Social Security numbers. Avfuel denies wrongdoing, but has agreed to settle the lawsuit to avoid litigation costs and uncertainties.

SciPlay Corporation Settlement - Social Casino Games

SciPlay allegedly sold virtual chips in social casino-style games (Jackpot Party Casino, Gold Fish Casino, Hot Shot Casino, Quick Hit Slots, 88 Fortunes, Monopoly Slots, and Bingo Showdown) in violation of Alabama, Tennessee, Kentucky, Ohio, New Jersey, and Massachusetts state laws. SciPlay denies all claims and admits no wrongdoing but has agreed to settle to avoid further litigation expenses.

Forbes Media Privacy Settlement

Forbes Media disclosed subscribers' personally identifiable information (including video viewing data) to Facebook via the Facebook Tracking Pixel without consent, allegedly violating the Video Privacy Protection Act. Forbes denies wrongdoing but agreed to settle to avoid litigation costs.

Paid Up to $15

Independent Living Systems Data Breach Settlement

Independent Living Systems LLC experienced a data security incident in June/July 2022 in which an unauthorized third party may have gained access to files containing sensitive personal information, including names, Social Security numbers, tax identification numbers, medical information, and health insurance information. ILS denies any wrongdoing or liability.

Paid Up to $5,000

Brown Integrated Logistics Data Breach Settlement

Brown Integrated Logistics, Inc. suffered an unauthorized data breach on or around November 13-15, 2023, that exposed personal information including names, addresses, dates of birth, Social Security numbers, financial account information, medical information, and health insurance data. The company notified affected individuals in September 2024. Brown Integrated Logistics denies any wrongdoing.

Paid $75–$4,100

Suther v. Skagit Regional Hospital Patient Portal Settlement

Skagit Regional Hospital allegedly disclosed patients' confidential personally identifiable information and protected health information to third-party technologies without patient consent. The defendant denies all claims but agreed to settle to avoid the expense and uncertainties of continued litigation.

Paid Up to $20

Crossroads Equipment Lease & Finance Data Breach Settlement

Crossroads Equipment Lease & Finance, LLC experienced a cybersecurity incident in or around April 2023 that impacted the personal information of Settlement Class Members. The company has reached a settlement in a class action lawsuit regarding this security incident.

Evolve Bank & Trust Data Breach Settlement

Evolve Bank & Trust experienced unauthorized access to its information systems in February and May 2024, affecting personal banking customers and Evolve FinTechs customers. Private information including names, dates of birth, Social Security numbers, driver's license numbers, bank account numbers, and contact information were included in files affected by the data incident. The defendant denies any wrongdoing.

Paid $20–$3,000

InsideView Right of Publicity Settlement

Demandbase, Inc. and InsideView Technologies, Inc. allegedly used consumers' names, contact information, job titles, places of work, education histories, and cities of residence to encourage people to purchase subscriptions to their database without consent, violating right-of-publicity laws in seven states. The defendants deny wrongdoing and the court has not decided who is right.

Paid An equal, or pro rata, share of their respective state Settlement Fund, after payment of Settlement Administration expenses, attorneys' fees and costs, and any service award to their state Settlement Class Representative(s).

Keenan & Associates Data Breach Settlement

Between August 21-27, 2023, an unauthorized user accessed sensitive personal information of Keenan & Associates customers, including names, dates of birth, Social Security numbers, passport numbers, driver's license numbers, health insurance information, and medical records. Plaintiffs claim Keenan failed to adequately protect this personally identifying information. Keenan denies wrongdoing and admits no liability by settling.

Paid Up to $10,000

Omnia Nightclub San Diego Ladies' Night Pricing Settlement

Male and non-binary patrons paid full price for Ladies' Night events at the Omnia Nightclub in San Diego while female patrons received discounts. The settlement requires the defendants to pay class members for this pricing disparity.

Paid Up to $4,000

PurFoods Data Breach Settlement

Between January 16 and February 22, 2023, PurFoods suffered a cyberattack that may have resulted in unauthorized access to personal information of customers, employees, and independent contractors. The company notified approximately 1.2 million individuals of the breach in August and September 2023. PurFoods denies any wrongdoing.

Paid $75–$5,000

Heartland Alliance Data Breach Settlement

Heartland Alliance organizations suffered a data breach on or about January 26, 2022, that impacted individuals' personal information. The defendants have denied any wrongdoing but agreed to settle the class action lawsuit brought by affected individuals.

Paid $0–$5,000

Morris Hospital Data Breach Settlement

Morris Hospital experienced a data breach on April 4, 2023, which allegedly impacted certain individuals' personal information. A proposed class action settlement has been reached to compensate affected individuals.

IHOP/Mesk Investment Wage Transparency Settlement

Mesk Investment (IHOP) allegedly violated Washington's pay transparency law by posting job openings without disclosing the wage scale, salary range, or a general description of benefits and compensation. The defendants deny the claims and admit no wrongdoing. A settlement has been reached without a court determination on the merits.

Paid Up to $1,414.37

Bottoms v. Block, Inc. - Cash App Referral Text Settlement

Block, Inc. allegedly violated Washington law by substantially assisting its users to transmit unsolicited commercial text messages to their contacts residing in Washington through Cash App's Invite Friends referral program. Block denies any wrongdoing and maintains it has complied with all state and federal laws.

Paid $88–$147

Frontier Data Breach Class Action Settlement

Frontier Communications Parent, Inc. suffered a data breach detected on or about April 14, 2024, in which an unauthorized third party may have gained access to files containing private information (names, dates of birth, Social Security numbers, and other personally identifiable information) of individuals who applied to Frontier for residential services. The company detected the breach and notified affected individuals in or around June 2024.

Paid $100–$5,000

Snow v. Align Technology Inc. Settlement

Align Technology, Inc. allegedly engaged in anticompetitive conduct related to its relationship with SmileDirectClub LLC, resulting in consumers overpaying for certain SmileDirectClub products. Plaintiffs assert claims under the federal Sherman Antitrust Act. Align denies any wrongdoing.

Paid Pro rata cash payment (amount depends on number of valid claims filed)

Home Partners Lease Settlement

Home Partners leased residential homes to consumers using leases that allegedly contained misleading, unenforceable, or unlawful provisions related to repair and maintenance obligations. The defendants deny the allegations and admit no wrongdoing, but have agreed to settle to avoid the cost and risk of continued litigation.

MN DVS Record Expungement Class Action

The Minnesota Department of Public Safety's Driver and Vehicle Services division allegedly failed to follow court expungement orders and state statute requirements to seal criminal records as ordered. The defendants deny liability, but agreed to settle the lawsuit as a compromise to end the case.

Paid Up to $15,000

Stone v. Accellion USA LLC Data Breach Settlement

Cybercriminals potentially accessed files containing individuals' personal information during a data security incident at the Office of the Washington State Auditor in December 2020. The defendant denies all claims and wrongdoing; the settlement resolves the disputed claims without admitting liability.

Collins v. District of Columbia FLSA Overtime Pay Settlement

The District of Columbia allegedly failed to properly calculate the overtime rate to include the $14 per diem hazardous duty pay as required by federal law (FLSA) between March 16, 2020 and July 25, 2020. The District is settling the lawsuit without admitting to any violations.

Rusnak Corporation Data Breach Settlement

Rusnak Corporation experienced a targeted cyberattack on its computer systems on or about June 13-16, 2023, in which certain files containing private information were accessed. Rusnak denies all claims and wrongdoing but has agreed to settle to avoid costs and risks of continued litigation.

The Christ Hospital Data Privacy Settlement

The Christ Hospital allegedly disclosed protected health information to third parties, including Facebook and Google, through its patient portal and mobile app. The hospital denies these allegations, including denying that any protected health information was shared or that any tracking tools were installed. The parties agreed to settle to avoid litigation risks and legal uncertainty.

Paid From $37.50

Apria Healthcare Data Breach Settlement

Apria Healthcare experienced illegal hacking events that resulted in unauthorized access to or disclosure of customers' protected information. The company sent notices to affected individuals about the potential compromise of their data. Apria denies any wrongdoing.

Paid Up to $2,000

Methodist Hospitals MyChart Data Breach Settlement

The Methodist Hospitals, Inc. allegedly disclosed confidential personal and protected health information to third-party technologies without patient consent. The defendant denies all claims and maintains it did nothing wrong but agreed to the settlement to avoid the expense and burden of continued litigation.

Paid Up to $25

Center for Vein Restoration Data Breach Settlement

Center for Vein Restoration experienced a data breach between October 1 and October 6, 2024, in which unauthorized parties accessed or acquired private information of current and former patients. The compromised data included names, addresses, Social Security numbers, dates of birth, laboratory data, financial data, employee data, and business data.

Paid $100–$5,000

Silvergate Capital Corporation Securities Litigation Settlement

Investors alleged that Silvergate Capital Corporation violated federal securities laws by making false and misleading statements about Silvergate Bank's vetting, due diligence, and monitoring of customers. Silvergate Capital has settled the claims for $37.5 million in cash without admitting wrongdoing.

Greenridge Farm Wage Settlement

The Illinois Attorney General's Office, following a joint investigation with the U.S. Department of Labor Wage and Hour Division, sued Greenridge Farm for failing to properly pay workers in accordance with Illinois law, including failure to pay overtime wages. Greenridge has settled the lawsuit.

Paid Payment of penalties (amount not specified)

Fashion Nova Website Accessibility Settlement

Fashion Nova's website was allegedly inaccessible to legally blind individuals using screen reading software, denying them an experience equivalent to sighted individuals. Fashion Nova denies these allegations and maintains it did nothing wrong. The settlement is not an admission of guilt or wrongdoing.

Paid Up to $4,000

Lily Transportation Driver-Facing Camera Settlement

Lily Transportation, LLC allegedly installed driver-facing cameras in its trucks and recorded Illinois drivers without obtaining their written consent in advance. Defendants denies violating the Illinois Biometric Information Privacy Act or any other law, but the parties have agreed to settle the lawsuit to avoid the time and expense of continued litigation.

Google Education BIPA Settlement

Google is accused of violating Illinois law by collecting and storing biometric data (voice models, face models, Voice Match, and Face Match features) of individuals who had Google Workspace for Education or G Suite for Education accounts while enrolled in Illinois schools, without proper notice and consent. Google denies all allegations and claims it did not collect, capture, or store biometric data without notice and consent.

Paid Settlement Fund will be divided equally (pro rata) among all Class Members who file a valid claim, after Court-approved deductions for taxes, administration expenses, attorneys' fees, and service payments.

Bayer ADR Securities Litigation Settlement

Bayer is settling a securities class action lawsuit related to its publicly traded American Depositary Receipts. The court preliminarily approved the settlement on June 27, 2025, and authorized it to be distributed to potential class members.

Bone & Joint Clinic Data Breach Settlement

A ransomware cyberattack on Bone & Joint Clinic was discovered on January 16, 2023, in which an unauthorized third party gained access to the company's systems. The breach potentially impacted the personally identifiable information and personal health information of approximately 105,094 individuals, including patients and employees. Bone & Joint denies any wrongdoing but has agreed to settle the lawsuit to avoid litigation costs.

Paid $75–$5,000

SEAC Stockholder Settlement

Defendants Sports Entertainment Acquisition Holdings LLC and several officers are settling a stockholder class action over alleged misconduct related to SEAC Class A common stock that was not redeemed as of the Merger closing on January 27, 2022. The defendants have agreed to pay $12,000,000 to resolve all claims in the action.

Mammoth Hospital Pixel Settlement

Mammoth Hospital used third-party tracking technologies called "tracking pixels" on its web pages. Plaintiff claims this violated certain California privacy laws. Mammoth denies wrongdoing, and the parties have agreed to settle to avoid the costs and risks of continuing litigation.