Past settlements

Themis VPPA Settlement

Themis Bar Review, LLC allegedly disclosed subscribers' personally identifiable information to Facebook via the Facebook Tracking Pixel without consent, in violation of the Video Privacy Protection Act (VPPA). The defendant denies violating any law but agreed to the settlement to avoid litigation costs and uncertainty.

Paid $263–$526

Oakley v. Kitsap Mental Health Services Data Breach Settlement

Kitsap Mental Health Services experienced a targeted cyberattack on its computer systems in October 2024. The attack compromised files containing private information including names, addresses, birth dates, Social Security numbers, driver's license numbers, medical diagnoses, treatment information, medications, claims information, and financial information. KMHS denies wrongdoing, and the parties have agreed to settle to avoid further costs and litigation.

Windy City Amusements H-2B Wage Settlement

Defendants Windy City Amusements Inc., 2M Maintenance Inc., Mark Salerno, and Anthony Salerno allegedly failed to properly provide H-2B employees their wages for hours worked over forty hours in a workweek pursuant to Illinois law. The defendants have denied all allegations and that they acted wrongfully. In 2025, the parties agreed to settle to avoid the cost of trial and appeal.

Lyon Real Estate Data Breach Settlement

Between April 18, 2023 and May 4, 2023, Lyon Real Estate experienced a data security incident that gave an unauthorized actor access to files containing personal information including names, dates of birth, driver's license numbers, Social Security numbers, tax identification numbers, medical information, health insurance information, and credit card information. Lyon has agreed to pay a $637,500 settlement fund and implement enhanced data security measures.

Paid Up to $10,000

Watson Clinic Data Breach Settlement

Watson Clinic discovered a data security incident in February 2024 where an unauthorized third party gained access to patient information including names, addresses, birthdates, Social Security numbers, driver's license numbers, financial account information, and medical information. For certain individuals, the unauthorized party published digital images on the dark web. Watson Clinic denies any wrongdoing and denies liability.

Paid $100–$75,000

OptumRx TCPA Clinical Adherence Calls Settlement

OptumRx, Inc. placed clinical adherence calls using artificial or prerecorded voices to cellular telephone numbers and VOIP lines of non-customers, other than prescription refill reminders or COVID-19 vaccine calls, from April 20, 2020 through October 22, 2025. The settlement resolves alleged Telephone Consumer Protection Act (TCPA) claims arising from these calls.

Paid Pro rata share of the settlement fund after deductions for notice, administration, attorneys' fees, litigation costs, and incentive awards

Half Price Books Wage Disclosure Settlement

Half Price Books allegedly violated Washington law by not disclosing wage scales or salary ranges in job postings for open positions. The defendant denies all claims and contends it is not liable.

Paid $657.38–$5,000

Arden Claims Service LLC Data Breach Settlement

Arden Claims Service LLC experienced a targeted cyberattack on its computer systems on or about October 17, 2023. Certain files containing private information, including names and Social Security numbers, were accessed during the data incident.

E.S. v. Regence BlueShield Hearing Aid Coverage Settlement

Two individuals sued Regence BlueShield and Cambia Health Solutions, alleging that Regence excluded hearing aids and related services from certain Washington health plans, violating the law. Regence settled by agreeing to pay $3 million to reimburse class members for uncovered hearing aid expenses from October 2014 through December 2025.

Aura Frames BIPA Settlement

Aura Home, Inc. d/b/a Aura Frames allegedly unlawfully collected, stored, and used facial geometry data from user photographs without proper informed written consent and without following required data retention and destruction policies under the Illinois Biometric Information Privacy Act (BIPA). The defendant denies all allegations and wrongdoing.

Paid Up to $13.28

Rocky Mountain Gastroenterology Data Breach Settlement

Rocky Mountain Gastroenterology Associates PLLC experienced a cyberattack by an unauthorized third party in September 2024 that potentially compromised Private Information of patients. The company is settling a class action lawsuit over the data incident.

Purpose Financial Data Breach Settlement

An unauthorized third party gained access to Purpose Financial's corporate network in February 2023, potentially exposing names and Social Security numbers of certain consumers. Purpose Financial denies wrongdoing and liability but agreed to settle the lawsuit.

Paid $50–$5,000

Spirit AeroSystems Securities Settlement

Spirit AeroSystems Holdings, Inc. is accused of making false or misleading statements regarding its publicly traded Class A common stock. The company has agreed to settle the securities litigation without admitting wrongdoing by paying $29.2 million to compensate shareholders who were injured by the alleged misstatements.

Peerstar Data Breach Settlement

On February 22, 2023, Peerstar experienced a cyberattack that compromised personal information of current and former patients, including names, Social Security numbers, government-issued IDs, financial account numbers, credit/debit card numbers, dates of birth, and health insurance information. Peerstar denies wrongdoing and says it has meritorious defenses, but is settling to resolve the disputed claims.

Paid Up to $5,000

Winston Weaver Fire Evacuation Class Action Settlement

A fire at the Winston Weaver facility on January 31, 2022, caused an evacuation of the surrounding area. The lawsuit alleges the defendant's negligence, gross negligence, and public/private nuisance caused the fire and evacuation. The defendant denies the allegations and any wrongdoing, but agreed to settle the dispute.

Paid Pro-rata cash payment to members of the Settlement Class who submit a valid and timely Claim Form

Silvergate Bank FTX Settlement

Silvergate Bank, Silvergate Capital Corporation, and Alan J. Lane allegedly aided and abetted tortious conduct by FTX, Alameda, and Sam Bankman-Fried. The defendants deny no wrongdoing is mentioned but agree to pay $10,000,000 to settle the lawsuit and avoid the costs and risks of continuing litigation.

RAYUS Radiology Data Breach Settlement

RAYUS Radiology allegedly disclosed confidential personally identifiable information and protected health information to third-party technologies without patient consent. The defendant denies all claims and maintains it did nothing wrong but agreed to the settlement to avoid litigation expenses and uncertainties.

Paid Up to $25

Four Hands Data Security Incident Settlement

Four Hands experienced a data security incident from December 2023 to January 2024 in which certain files containing private information were potentially accessed. The files may have contained personal information such as names, Social Security numbers, dates of birth, financial account information, passport numbers, driver's license numbers, and state ID card numbers. The defendant denies any wrongdoing.

FCDG Data Settlement (First Choice Dental Data Breach)

First Choice Dental (FCDG Management, LLC) suffered a data breach in October 2023 where cybercriminals potentially accessed private information including names, dates of birth, Social Security numbers, passport numbers, driver's license numbers, credit and debit card numbers, financial account numbers, and health information. The company denies all allegations of wrongdoing.

Paid $50–$6,000

Barracuda Networks Data Breach Settlement

In October 2022, unauthorized third parties gained access to an email security gateway (ESG) that Barracuda Networks provided to Wescom Central Credit Union, potentially exposing the private information of class members. Barracuda has agreed to settle without admitting any liability or wrongdoing.

Paid $20–$2,020

M&D Capital Data Breach Settlement

M&D Capital Premier Billing, LLC and Island Ambulatory Surgery Center LLC experienced an unauthorized data breach discovered on or about July 8, 2023, affecting Settlement Class Members' personal information including names, addresses, medical billing and insurance information, medical records, dates of birth, financial information, and Social Security numbers. Plaintiffs alleged negligence, breach of implied contract, and unjust enrichment, while Defendants deny all legal claims and wrongdoing.

Elyria Data Incident Settlement

Elyria Foundry Holdings, LLC suffered a data security incident discovered in June 2024 that compromised the personally identifiable information (PII) of the company's current and former employees and their spouses and dependents.

CellNetix Data Security Incident Settlement

In December 2023, an unauthorized third party gained access to CellNetix information systems and potentially compromised sensitive personal information including names, Social Security numbers, driver's license numbers, state identification numbers, dates of birth, passport numbers, and health insurance information. Plaintiff Nicole Whitcraft sued CellNetix on behalf of affected individuals to seek compensation for the consequences of the data breach.

Paid Up to $5,000

Sweetwater Union High School District Data Breach Settlement

In February 2023, an unauthorized third party gained access to Sweetwater Union High School District's network and potentially accessed files containing sensitive personal information of current and former employees and students, including names, Social Security numbers, dates of birth, driver's license numbers, passport numbers, financial account information, online account credentials, health insurance information, and other sensitive data. Sweetwater denies wrongdoing and liability but has agreed to settle the lawsuit on a class-wide basis.

Paid $100–$5,000

Asheville Arthritis Data Breach Settlement

In May 2024, Asheville Arthritis and Osteoporosis Center experienced a data breach that compromised private and personally identifying information of roughly 58,000 patients. The stolen information included names, addresses, dates of birth, phone numbers, Social Security numbers, and medical information such as medical notes, lab results, diagnoses, and health insurance details. The defendant disputes the claims and denies wrongdoing.

Progressive Leasing Data Breach Settlement

A third party gained unauthorized access to Prog Leasing's systems on or around September 11, 2023, potentially exposing the personal information of customers. The company announced the data incident on or around September 21, 2023. Plaintiffs sued alleging negligent data security practices, though the defendant denies any wrongdoing.

Cerebral Data Breach Settlement

Cerebral, Inc. used the Meta Pixel on its website, which allegedly disclosed personal information and protected health information of customers to Facebook without proper authorization. The disclosure occurred as a result of the company's website usage tracking practices. Cerebral denies the allegations but agreed to settle the claims brought under California's unfair competition law.

Paid Pro rata shares of the Settlement Fund, plus a $300 credit toward a self-pay Cerebral Therapy & Medication plan

YouTube Children's Privacy Settlement (Hubbard v. Google)

Google allegedly tracked and collected personal data about children under 13 without parental consent on YouTube. Google denies that it did anything wrong.

Group Health Cooperative of South Central Wisconsin Data Breach Settlement

Group Health Cooperative of South Central Wisconsin experienced a data breach on or about January 24, 2024, that impacted personally identifiable information and private health information of individuals. The company is settling claims related to this data incident.

Anthem Residential Treatment Coverage Denial Settlement

Anthem denied claims for residential treatment coverage for mental health conditions and substance use disorders, allegedly using medical necessity criteria that were more restrictive than accepted standards of care and the terms of health benefit plans. Anthem denies the allegations but settled to avoid litigation costs and uncertainty.

Paid Amount depends on how many class members submit claims and will likely not be full reimbursement of out-of-pocket expenses. Class members who do not submit claims receive a nominal payment.

Hypertension Nephrology Associates Data Breach Settlement

Hypertension Nephrology Associates, P.C. experienced a data incident on or about January 20, 2024, that compromised the personal information of class members. The company is settling this class action lawsuit.

Limited Run Games Video Privacy Settlement

Limited Run Games Inc. allegedly disclosed subscribers' personally identifiable information to Meta Platforms and other third parties without consent, violating the Video Privacy Protection Act (VPPA). The defendant denies wrongdoing and the court has not decided the case on its merits.

Paid Pro rata (equal) cash payment from $2,720,000 settlement fund

Barrington v. Benefit Profiles Data Security Incident Settlement

Benefit Profiles, Inc. experienced a data security incident in or around April 2024 in which certain files containing personal information were potentially accessed. The files may have contained Social Security numbers and health insurance information. Benefit Profiles denies wrongdoing, and the court has not decided the case.

Trinity Health Data Breach Settlement

Trinity Health Corporation suffered a data security incident on January 20, 2021, involving the Accellion File Transfer Appliance. Personal information was potentially exposed, including names, addresses, emails, dates of birth, healthcare provider information, medical records, Social Security numbers, and credit card information. The company sent notices of the breach to affected California residents on April 6, 2021.

Paid $11–$231

Lyman v. Auto Club Family Insurance Company Settlement

Auto Club Family Insurance Co. allegedly improperly deducted certain types of depreciation (called "Nonmaterial Depreciation") when adjusting structural damage insurance claims for Missouri homeowners. The settlement provides payments to those affected between June 5, 2012 and August 12, 2025.

Paid From $25

Cencora/The Lash Group Data Security Incident Settlement

On February 27, 2024, Cencora disclosed that its information systems had been improperly accessed by unknown parties. The data breach exposed Personal Information including names, addresses, Social Security numbers, health and insurance information, financial account information, and other sensitive data. Cencora has agreed to pay $40,000,000 and implement enhanced data and information security measures to resolve claims arising from this incident.

Paid Up to $5,000

Luna Innovations Incorporated Securities Litigation Settlement

Investors filed a securities class action alleging violations of Sections 10(b) and 20(a) of the Securities Exchange Act related to Luna Innovations Inc. securities. Luna Innovations Inc. and officers Scott A. Graeff, Eugene J. Nestro, and George Gomez-Quintero have agreed to settle the claims for $7,300,000 in cash. The defendants admit no wrongdoing.

Singularity Securities Settlement

Defendants allegedly misled shareholders about the benefits and value of various transactions, joint ventures, and business plans relating to Singularity's transformation from a global logistics company to a cryptocurrency mining and hardware development business. The defendants deny all allegations of wrongdoing.

Paid Each class member receives a pro rata share of the net settlement fund based on their recognized claim amount compared to total recognized claims of all claimants.

Progressive Direct Insurance Email Settlement

Progressive Direct Insurance Company allegedly sent emails to consumers between 9:00 p.m. and 8:00 a.m. in violation of the Florida Consumer Collection Practices Act (FCCPA). Progressive denies these allegations and any wrongdoing. The court has not decided who is right.

CAVU eCommerce Service Charge Settlement

CAVU eCommerce failed to properly disclose a mandatory "Service Charge" for online bookings on Airportparkingreservations.com and Airportparking.com, allegedly violating California's Honest Pricing Law. The defendant denies any wrongdoing but agreed to settle to avoid ongoing litigation expenses.

Paid Pro rata share based on total amount of service charges paid

Parrot Island Class Action Settlement

In April 2021, Parrot Island Waterpark's ticketing system was upgraded and began collecting sales tax in excess of the allowed amount on all tickets sold. This continued until November 30, 2023, when the error was discovered and corrected. The waterpark set aside all funds collected inappropriately, and an interpleader class action suit was filed to return money to affected patrons.

Paid 9.5% of the ticket price

RIBridges Data Breach Settlement

Deloitte Consulting LLP experienced a data incident involving the Rhode Island RIBridges system that may have impacted private information of settlement class members. The company denies any wrongdoing.

Paid $100–$5,000

City of Hope Data Breach Settlement

City of Hope National Medical Center experienced a data security incident discovered in October 2023 that involved files containing Personally Identifiable Information and/or Protected Health Information. The lawsuit asserts claims related to this data breach, though City of Hope denies liability. The settlement resolves the litigation without establishing who is correct.

Paid $100–$5,250

Therapeutic Health Services Data Breach Settlement

Therapeutic Health Services experienced a data incident on or around February 26, 2024, during which unauthorized parties may have accessed personal information of THS patients and employees. THS denies all allegations and any wrongdoing, and the settlement is not an admission of liability.

San Diego Unified School District Data Settlement

San Diego Unified School District ("SDUSD") suffered a ransomware attack on or about October 25, 2022, in which a third-party threat actor group gained unauthorized access to SDUSD's systems and infected certain files with ransomware. This may have exposed the personal identifiable information and/or personal health information of certain SDUSD students and employees. SDUSD denies liability, but has agreed to settle the resulting class action lawsuit.

Paid $40–$2,500

Mile Hi Foods Data Security Incident Settlement

On or around September 13, 2024, a cybercriminal accessed Mile Hi Foods' network and obtained personal information. Mile Hi Foods mailed notice of the data incident to affected customers. The defendant denies any wrongdoing and admits to no violations of law.

Orthopedics Rhode Island Data Breach Settlement

Orthopedics Rhode Island, Inc. experienced a data breach on or about September 4, 2024, where an unauthorized third party accessed the company's computer systems and potentially compromised individuals' personally identifiable information and private health information. The defendant denies the allegations.

Behavioral Health Resources Data Breach Settlement

Behavioral Health Resources suffered a data security incident in November 2024 affecting its computer systems. Certain files containing personal information including names, dates of birth, Social Security numbers, medical information, biometric and/or genetic data, government-issued IDs, and health insurance information were potentially accessed. BHR denies all claims and wrongdoing but agreed to settle to avoid the costs and risks of continuing litigation.

Instinct Pet Foods Data Settlement

An unauthorized access to Instinct Pet Foods' computer system was detected on or around October 16, 2024, which allegedly exposed the personally identifiable information (PII) of the company's current and former employees. The defendant agreed to settle a class action lawsuit regarding this data breach.

Restek Data Breach Settlement

Restek Corporation experienced a data security incident beginning around June 2, 2023, that compromised the personal information of current and former employees. Restek maintains it had meritorious defenses and denies wrongdoing, but agreed to settle the lawsuit to resolve the disputed claims.

Redeemer Health Tracking Pixel Settlement

Redeemer Health allegedly used unauthorized tracking pixels on its websites and patient portals that collected patient data without proper HIPAA compliance. The company has agreed to pay settlement benefits and implement changes to ensure tracking pixels comply with HIPAA, including requiring business associate agreements with third-party providers.

Paid Up to $25

Oklahoma Spine Hospital Data Breach Settlement

Oklahoma Spine Hospital experienced a data incident in July 2024 where certain computer files containing private information were potentially accessed, including names, Social Security numbers, dates of birth, financial account numbers, health insurance information, medical information, payment card information, and driver's license information. The defendant denies all claims of wrongdoing but agreed to settle to avoid litigation costs and risks.

Nations Direct Mortgage Data Breach Settlement

Nations Direct Mortgage experienced a targeted cyberattack on its computer systems in December 2023 that accessed certain files containing private information including names, addresses, phone numbers, email addresses, dates of birth, and Social Security numbers. The defendant denies wrongdoing and has agreed to settle to avoid the costs and uncertainties of ongoing litigation.

UTB Enterprises/Goldenband McDonald's Wage & Hour Settlement

Hourly employees at McDonald's franchise locations operated by the defendants allege they were not paid for meal periods of less than 30 minutes during six-hour shifts. The defendants have agreed to settle these wage and hour claims.

Paid $31.14–$872.49

Fathom Realty TCPA Settlement

Fathom Realty sent text messages through its former real estate agent Marcus Edwards to people whose phone numbers were on the National Do Not Call Registry for at least 30 days, allegedly violating the Telephone Consumer Protection Act (TCPA). Fathom denies all allegations of wrongdoing and has agreed to settle the class action without admitting liability.

Paid Up to $48

Memorial Hospital Data Breach Settlement

Memorial Hospital and Manor experienced a targeted cyberattack on its computer systems in November 2024. Certain files containing private information were accessed, including names, dates of birth, Social Security numbers, and protected health information. The defendant denies wrongdoing, and this settlement was agreed to avoid the costs and risks of continued litigation.

Medical Center Barbour Data Breach Settlement

On or about October 29, 2023, cybercriminals accessed MCBH's data systems and potentially obtained personal information of current and former patients and employees. The lawsuit claims MCBH was negligent in protecting this data and seeks damages for negligence, breach of contract, breach of fiduciary duty, breach of confidence, unjust enrichment, and invasion of privacy. The defendants deny all wrongdoing.

ASM Global Parent Data Security Incident Settlement

ASM Global detected a data security incident on October 12, 2023, affecting unauthorized activity on certain on-premises servers. Cybercriminals allegedly gained access to personal information including names, dates of birth, Social Security numbers, driver's license numbers, passport numbers, and credit/debit card information with CVV codes, as well as medical diagnosis and treatment information. ASM denies any wrongdoing.

Paid $0–$10,000

Husqvarna Grass Trimmer Settlement

A customer alleged that certain Husqvarna gas-powered grass string trimmers sold between October 2021 and November 2023 were defective and subject to a CPSC recall. Husqvarna denies any wrongdoing but has agreed to settle the class action.

Paid Up to $45

Keto Pills Settlement

Global E-Trading, LLC allegedly participated in a scheme to help retailers overcharge consumers who bought Ultra Fast Keto Boost, Instant Keto, or InstaKeto pills. The company denies wrongdoing. In June 2025, the parties agreed to settle for $12,500,000 to avoid the risk and expense of further litigation.