Past settlements

RAYUS Radiology Data Breach Settlement

RAYUS Radiology allegedly disclosed confidential personally identifiable information and protected health information to third-party technologies without patient consent. The defendant denies all claims and maintains it did nothing wrong but agreed to the settlement to avoid litigation expenses and uncertainties.

Paid Up to $25

FCDG Data Settlement (First Choice Dental Data Breach)

First Choice Dental (FCDG Management, LLC) suffered a data breach in October 2023 where cybercriminals potentially accessed private information including names, dates of birth, Social Security numbers, passport numbers, driver's license numbers, credit and debit card numbers, financial account numbers, and health information. The company denies all allegations of wrongdoing.

Paid $50–$6,000

Four Hands Data Security Incident Settlement

Four Hands experienced a data security incident from December 2023 to January 2024 in which certain files containing private information were potentially accessed. The files may have contained personal information such as names, Social Security numbers, dates of birth, financial account information, passport numbers, driver's license numbers, and state ID card numbers. The defendant denies any wrongdoing.

M&D Capital Data Breach Settlement

M&D Capital Premier Billing, LLC and Island Ambulatory Surgery Center LLC experienced an unauthorized data breach discovered on or about July 8, 2023, affecting Settlement Class Members' personal information including names, addresses, medical billing and insurance information, medical records, dates of birth, financial information, and Social Security numbers. Plaintiffs alleged negligence, breach of implied contract, and unjust enrichment, while Defendants deny all legal claims and wrongdoing.

Elyria Data Incident Settlement

Elyria Foundry Holdings, LLC suffered a data security incident discovered in June 2024 that compromised the personally identifiable information (PII) of the company's current and former employees and their spouses and dependents.

Barracuda Networks Data Breach Settlement

In October 2022, unauthorized third parties gained access to an email security gateway (ESG) that Barracuda Networks provided to Wescom Central Credit Union, potentially exposing the private information of class members. Barracuda has agreed to settle without admitting any liability or wrongdoing.

Paid $20–$2,020

CellNetix Data Security Incident Settlement

In December 2023, an unauthorized third party gained access to CellNetix information systems and potentially compromised sensitive personal information including names, Social Security numbers, driver's license numbers, state identification numbers, dates of birth, passport numbers, and health insurance information. Plaintiff Nicole Whitcraft sued CellNetix on behalf of affected individuals to seek compensation for the consequences of the data breach.

Paid Up to $5,000

Sweetwater Union High School District Data Breach Settlement

In February 2023, an unauthorized third party gained access to Sweetwater Union High School District's network and potentially accessed files containing sensitive personal information of current and former employees and students, including names, Social Security numbers, dates of birth, driver's license numbers, passport numbers, financial account information, online account credentials, health insurance information, and other sensitive data. Sweetwater denies wrongdoing and liability but has agreed to settle the lawsuit on a class-wide basis.

Paid $100–$5,000

Asheville Arthritis Data Breach Settlement

In May 2024, Asheville Arthritis and Osteoporosis Center experienced a data breach that compromised private and personally identifying information of roughly 58,000 patients. The stolen information included names, addresses, dates of birth, phone numbers, Social Security numbers, and medical information such as medical notes, lab results, diagnoses, and health insurance details. The defendant disputes the claims and denies wrongdoing.

Progressive Leasing Data Breach Settlement

A third party gained unauthorized access to Prog Leasing's systems on or around September 11, 2023, potentially exposing the personal information of customers. The company announced the data incident on or around September 21, 2023. Plaintiffs sued alleging negligent data security practices, though the defendant denies any wrongdoing.

Cerebral Data Breach Settlement

Cerebral, Inc. used the Meta Pixel on its website, which allegedly disclosed personal information and protected health information of customers to Facebook without proper authorization. The disclosure occurred as a result of the company's website usage tracking practices. Cerebral denies the allegations but agreed to settle the claims brought under California's unfair competition law.

Paid Pro rata shares of the Settlement Fund, plus a $300 credit toward a self-pay Cerebral Therapy & Medication plan

YouTube Children's Privacy Settlement (Hubbard v. Google)

Google allegedly tracked and collected personal data about children under 13 without parental consent on YouTube. Google denies that it did anything wrong.

Limited Run Games Video Privacy Settlement

Limited Run Games Inc. allegedly disclosed subscribers' personally identifiable information to Meta Platforms and other third parties without consent, violating the Video Privacy Protection Act (VPPA). The defendant denies wrongdoing and the court has not decided the case on its merits.

Paid Pro rata (equal) cash payment from $2,720,000 settlement fund

Group Health Cooperative of South Central Wisconsin Data Breach Settlement

Group Health Cooperative of South Central Wisconsin experienced a data breach on or about January 24, 2024, that impacted personally identifiable information and private health information of individuals. The company is settling claims related to this data incident.

Barrington v. Benefit Profiles Data Security Incident Settlement

Benefit Profiles, Inc. experienced a data security incident in or around April 2024 in which certain files containing personal information were potentially accessed. The files may have contained Social Security numbers and health insurance information. Benefit Profiles denies wrongdoing, and the court has not decided the case.

Anthem Residential Treatment Coverage Denial Settlement

Anthem denied claims for residential treatment coverage for mental health conditions and substance use disorders, allegedly using medical necessity criteria that were more restrictive than accepted standards of care and the terms of health benefit plans. Anthem denies the allegations but settled to avoid litigation costs and uncertainty.

Paid Amount depends on how many class members submit claims and will likely not be full reimbursement of out-of-pocket expenses. Class members who do not submit claims receive a nominal payment.

Hypertension Nephrology Associates Data Breach Settlement

Hypertension Nephrology Associates, P.C. experienced a data incident on or about January 20, 2024, that compromised the personal information of class members. The company is settling this class action lawsuit.

Lyman v. Auto Club Family Insurance Company Settlement

Auto Club Family Insurance Co. allegedly improperly deducted certain types of depreciation (called "Nonmaterial Depreciation") when adjusting structural damage insurance claims for Missouri homeowners. The settlement provides payments to those affected between June 5, 2012 and August 12, 2025.

Paid From $25

Trinity Health Data Breach Settlement

Trinity Health Corporation suffered a data security incident on January 20, 2021, involving the Accellion File Transfer Appliance. Personal information was potentially exposed, including names, addresses, emails, dates of birth, healthcare provider information, medical records, Social Security numbers, and credit card information. The company sent notices of the breach to affected California residents on April 6, 2021.

Paid $11–$231

Cencora/The Lash Group Data Security Incident Settlement

On February 27, 2024, Cencora disclosed that its information systems had been improperly accessed by unknown parties. The data breach exposed Personal Information including names, addresses, Social Security numbers, health and insurance information, financial account information, and other sensitive data. Cencora has agreed to pay $40,000,000 and implement enhanced data and information security measures to resolve claims arising from this incident.

Paid Up to $5,000

Singularity Securities Settlement

Defendants allegedly misled shareholders about the benefits and value of various transactions, joint ventures, and business plans relating to Singularity's transformation from a global logistics company to a cryptocurrency mining and hardware development business. The defendants deny all allegations of wrongdoing.

Paid Each class member receives a pro rata share of the net settlement fund based on their recognized claim amount compared to total recognized claims of all claimants.

Luna Innovations Incorporated Securities Litigation Settlement

Investors filed a securities class action alleging violations of Sections 10(b) and 20(a) of the Securities Exchange Act related to Luna Innovations Inc. securities. Luna Innovations Inc. and officers Scott A. Graeff, Eugene J. Nestro, and George Gomez-Quintero have agreed to settle the claims for $7,300,000 in cash. The defendants admit no wrongdoing.

CAVU eCommerce Service Charge Settlement

CAVU eCommerce failed to properly disclose a mandatory "Service Charge" for online bookings on Airportparkingreservations.com and Airportparking.com, allegedly violating California's Honest Pricing Law. The defendant denies any wrongdoing but agreed to settle to avoid ongoing litigation expenses.

Paid Pro rata share based on total amount of service charges paid

Progressive Direct Insurance Email Settlement

Progressive Direct Insurance Company allegedly sent emails to consumers between 9:00 p.m. and 8:00 a.m. in violation of the Florida Consumer Collection Practices Act (FCCPA). Progressive denies these allegations and any wrongdoing. The court has not decided who is right.

Parrot Island Class Action Settlement

In April 2021, Parrot Island Waterpark's ticketing system was upgraded and began collecting sales tax in excess of the allowed amount on all tickets sold. This continued until November 30, 2023, when the error was discovered and corrected. The waterpark set aside all funds collected inappropriately, and an interpleader class action suit was filed to return money to affected patrons.

Paid 9.5% of the ticket price

RIBridges Data Breach Settlement

Deloitte Consulting LLP experienced a data incident involving the Rhode Island RIBridges system that may have impacted private information of settlement class members. The company denies any wrongdoing.

Paid $100–$5,000

Orthopedics Rhode Island Data Breach Settlement

Orthopedics Rhode Island, Inc. experienced a data breach on or about September 4, 2024, where an unauthorized third party accessed the company's computer systems and potentially compromised individuals' personally identifiable information and private health information. The defendant denies the allegations.

San Diego Unified School District Data Settlement

San Diego Unified School District ("SDUSD") suffered a ransomware attack on or about October 25, 2022, in which a third-party threat actor group gained unauthorized access to SDUSD's systems and infected certain files with ransomware. This may have exposed the personal identifiable information and/or personal health information of certain SDUSD students and employees. SDUSD denies liability, but has agreed to settle the resulting class action lawsuit.

Paid $40–$2,500

Mile Hi Foods Data Security Incident Settlement

On or around September 13, 2024, a cybercriminal accessed Mile Hi Foods' network and obtained personal information. Mile Hi Foods mailed notice of the data incident to affected customers. The defendant denies any wrongdoing and admits to no violations of law.

City of Hope Data Breach Settlement

City of Hope National Medical Center experienced a data security incident discovered in October 2023 that involved files containing Personally Identifiable Information and/or Protected Health Information. The lawsuit asserts claims related to this data breach, though City of Hope denies liability. The settlement resolves the litigation without establishing who is correct.

Paid $100–$5,250

Therapeutic Health Services Data Breach Settlement

Therapeutic Health Services experienced a data incident on or around February 26, 2024, during which unauthorized parties may have accessed personal information of THS patients and employees. THS denies all allegations and any wrongdoing, and the settlement is not an admission of liability.

Instinct Pet Foods Data Settlement

An unauthorized access to Instinct Pet Foods' computer system was detected on or around October 16, 2024, which allegedly exposed the personally identifiable information (PII) of the company's current and former employees. The defendant agreed to settle a class action lawsuit regarding this data breach.

Behavioral Health Resources Data Breach Settlement

Behavioral Health Resources suffered a data security incident in November 2024 affecting its computer systems. Certain files containing personal information including names, dates of birth, Social Security numbers, medical information, biometric and/or genetic data, government-issued IDs, and health insurance information were potentially accessed. BHR denies all claims and wrongdoing but agreed to settle to avoid the costs and risks of continuing litigation.

Restek Data Breach Settlement

Restek Corporation experienced a data security incident beginning around June 2, 2023, that compromised the personal information of current and former employees. Restek maintains it had meritorious defenses and denies wrongdoing, but agreed to settle the lawsuit to resolve the disputed claims.

Redeemer Health Tracking Pixel Settlement

Redeemer Health allegedly used unauthorized tracking pixels on its websites and patient portals that collected patient data without proper HIPAA compliance. The company has agreed to pay settlement benefits and implement changes to ensure tracking pixels comply with HIPAA, including requiring business associate agreements with third-party providers.

Paid Up to $25

Oklahoma Spine Hospital Data Breach Settlement

Oklahoma Spine Hospital experienced a data incident in July 2024 where certain computer files containing private information were potentially accessed, including names, Social Security numbers, dates of birth, financial account numbers, health insurance information, medical information, payment card information, and driver's license information. The defendant denies all claims of wrongdoing but agreed to settle to avoid litigation costs and risks.

Fathom Realty TCPA Settlement

Fathom Realty sent text messages through its former real estate agent Marcus Edwards to people whose phone numbers were on the National Do Not Call Registry for at least 30 days, allegedly violating the Telephone Consumer Protection Act (TCPA). Fathom denies all allegations of wrongdoing and has agreed to settle the class action without admitting liability.

Paid Up to $48

UTB Enterprises/Goldenband McDonald's Wage & Hour Settlement

Hourly employees at McDonald's franchise locations operated by the defendants allege they were not paid for meal periods of less than 30 minutes during six-hour shifts. The defendants have agreed to settle these wage and hour claims.

Paid $31.14–$872.49

Nations Direct Mortgage Data Breach Settlement

Nations Direct Mortgage experienced a targeted cyberattack on its computer systems in December 2023 that accessed certain files containing private information including names, addresses, phone numbers, email addresses, dates of birth, and Social Security numbers. The defendant denies wrongdoing and has agreed to settle to avoid the costs and uncertainties of ongoing litigation.

Memorial Hospital Data Breach Settlement

Memorial Hospital and Manor experienced a targeted cyberattack on its computer systems in November 2024. Certain files containing private information were accessed, including names, dates of birth, Social Security numbers, and protected health information. The defendant denies wrongdoing, and this settlement was agreed to avoid the costs and risks of continued litigation.

Medical Center Barbour Data Breach Settlement

On or about October 29, 2023, cybercriminals accessed MCBH's data systems and potentially obtained personal information of current and former patients and employees. The lawsuit claims MCBH was negligent in protecting this data and seeks damages for negligence, breach of contract, breach of fiduciary duty, breach of confidence, unjust enrichment, and invasion of privacy. The defendants deny all wrongdoing.

Figueroa v. Pret Settlement

Pret A Manger employees filed a lawsuit claiming the company failed to pay all wages owed, including straight pay, overtime, spread of hours pay, uniform maintenance pay, and shift change premiums. Pret denies these allegations but agreed to settle the case to avoid further litigation and business disruption.

Husqvarna Grass Trimmer Settlement

A customer alleged that certain Husqvarna gas-powered grass string trimmers sold between October 2021 and November 2023 were defective and subject to a CPSC recall. Husqvarna denies any wrongdoing but has agreed to settle the class action.

Paid Up to $45

ASM Global Parent Data Security Incident Settlement

ASM Global detected a data security incident on October 12, 2023, affecting unauthorized activity on certain on-premises servers. Cybercriminals allegedly gained access to personal information including names, dates of birth, Social Security numbers, driver's license numbers, passport numbers, and credit/debit card information with CVV codes, as well as medical diagnosis and treatment information. ASM denies any wrongdoing.

Paid $0–$10,000

Keto Pills Settlement

Global E-Trading, LLC allegedly participated in a scheme to help retailers overcharge consumers who bought Ultra Fast Keto Boost, Instant Keto, or InstaKeto pills. The company denies wrongdoing. In June 2025, the parties agreed to settle for $12,500,000 to avoid the risk and expense of further litigation.

Parksite Data Security Incident Settlement

Parksite's computer systems were targeted in a cyberattack that occurred around December 2023 to January 2024. Files containing private information, including names and Social Security numbers, were accessed. Parksite denies any wrongdoing, and the court has not decided the merits of the case.

Self Esteem Brands Data Breach Settlement

Self Esteem Brands experienced a cybersecurity incident occurring on or around December 19, 2023, and continuing until June 6, 2024. Certain files containing personal information were potentially accessed, including names, Social Security numbers, tax identification numbers, driver's license numbers, state identification numbers, passport and government identification numbers, financial account information, payment card information, health information, and health insurance information.

PRC-Saltillo Data Breach Settlement

PRC-Saltillo experienced a targeted cyberattack on its computer systems in August 2024 in which files containing sensitive information were accessed. The accessed information may have included names, addresses, phone numbers, dates of birth, treatment cost information, physician information, health insurance policy numbers, Medicare/Medicaid plan names, medical devices purchased, and certain employee Social Security numbers. PRC denies any wrongdoing.

Gotham Comedy Club Ticket Service Fee Settlement

Gotham Comedy Foundation, Inc. and related entities allegedly failed to properly disclose service charges for tickets purchased electronically to the Gotham Comedy Club in New York City, in violation of New York Arts and Cultural Affairs Law. The defendants deny wrongdoing but agreed to the settlement to avoid the costs and uncertainties of continuing the lawsuit.

Paid The service charge amount paid (Gotham Comedy Club charged $4.50 per ticket)

Residential Real Estate Broker Commissions Antitrust Settlements

Multiple real estate brokerages, the National Association of Realtors (NAR), and related entities settled antitrust allegations concerning residential real estate broker commissions. The settlements total over $1 billion and resolve claims related to commission practices in the real estate industry.

Brannon v. Rancho Family Medical Group Data Breach Settlement

In November 2023, unauthorized access of personal information occurred at KMJ Health Service, a service provider of Rancho Family Medical Group, Inc. RFMG notified affected individuals about the incident. The company has agreed to settle the resulting class action lawsuit.

Paid Out-of-Pocket Losses (documented); Attested Time claims; Pro Rata Cash Payments; three years of credit monitoring (enrollment required)

Tax Relief Helpers Pre-recorded Calls Settlement

Tax Relief Helpers, Inc. sent pre-recorded calls to consumers' cellphones. The company is paying to settle claims related to these calls.

Owings v. Medusind Data Breach Settlement

Medusind, Inc., a medical and dental billing and software company, experienced a data incident on December 29, 2023, when unauthorized parties infiltrated its computer systems, gaining access to settlement class members' private information including names, addresses, email addresses, phone numbers, health insurance information, payment information, medical records, and government identification numbers.

Paid $100–$5,100

Landmark Admin Data Breach Settlement

Landmark Admin, LLC and related insurance companies experienced a data security incident from May 13, 2024 to June 17, 2024, in which private information of certain individuals was potentially accessed, compromised, or impacted. The defendants deny all claims and allegations of wrongdoing.

Oklahoma Surgical Hospital Data Tracking Settlement

Oklahoma Surgical Hospital used tracking technology and tools on its websites that improperly shared patient data with third parties like Meta and Google without patients' knowledge or consent. OSH denies all allegations and wrongdoing but agreed to the settlement to avoid further litigation costs.

Paid Up to $12

Cascade Surgicenter Data Incident Settlement

In October 2023, Cascade Surgicenter and Neuromusculoskeletal Center of the Cascades experienced a targeted cyberattack that compromised their computer systems. Certain files containing personal information—including names, addresses, Social Security numbers, financial account details, credit card information, medical records, and health insurance information—were accessed. The defendants deny wrongdoing, and the court has not decided the merits of the case.

Reid Health Pixel Data Settlement

Reid Health disclosed confidential personally identifiable information and protected health information to third-party technologies without patient consent, specifically through the Meta pixel and other website tracking, analytics and advertising technologies on its websites. Reid Health denies all claims but agreed to the settlement to avoid litigation costs and uncertainties.

Paid Up to $25

University of Minnesota Data Breach Settlement

The University of Minnesota experienced unauthorized access to or exfiltration of personal information from its Legacy Data Warehouse in August 2021. The University posted a Notice of Data Incident on its website in September 2023. The University is settling claims related to this data breach without admitting wrongdoing.

Walker v. T-Mobile USA - SMB Account Executive Settlement

T-Mobile USA is settling a collective action lawsuit filed on behalf of current and former employees working as SMB Account Executives. The lawsuit alleged wage and hour violations under the Fair Labor Standards Act. T-Mobile denies wrongdoing and contends it paid all employees correctly, but has agreed to settle to avoid litigation costs and business disruptions.

Paid Based on allocation for initial Account Executive training period and/or number of weeks worked as SMB Account Executive during certain Covid-19 pandemic periods; half of payment subject to payroll tax deductions, other half treated as non-wage income without withholdings

Maui Fires Class Settlement

A number of companies, individuals, and Hawai'i government entities caused damages through the August 2023 Maui wildfires (Lahaina, Olinda, and Kula fires). The defendants have agreed to settle related class action lawsuits to avoid the costs, risks, and uncertainties of continuing litigation. The defendants deny any wrongdoing.