Past settlements

ASM Global Parent Data Security Incident Settlement

ASM Global detected a data security incident on October 12, 2023, affecting unauthorized activity on certain on-premises servers. Cybercriminals allegedly gained access to personal information including names, dates of birth, Social Security numbers, driver's license numbers, passport numbers, and credit/debit card information with CVV codes, as well as medical diagnosis and treatment information. ASM denies any wrongdoing.

Paid $0–$10,000

Self Esteem Brands Data Breach Settlement

Self Esteem Brands experienced a cybersecurity incident occurring on or around December 19, 2023, and continuing until June 6, 2024. Certain files containing personal information were potentially accessed, including names, Social Security numbers, tax identification numbers, driver's license numbers, state identification numbers, passport and government identification numbers, financial account information, payment card information, health information, and health insurance information.

Parksite Data Security Incident Settlement

Parksite's computer systems were targeted in a cyberattack that occurred around December 2023 to January 2024. Files containing private information, including names and Social Security numbers, were accessed. Parksite denies any wrongdoing, and the court has not decided the merits of the case.

PRC-Saltillo Data Breach Settlement

PRC-Saltillo experienced a targeted cyberattack on its computer systems in August 2024 in which files containing sensitive information were accessed. The accessed information may have included names, addresses, phone numbers, dates of birth, treatment cost information, physician information, health insurance policy numbers, Medicare/Medicaid plan names, medical devices purchased, and certain employee Social Security numbers. PRC denies any wrongdoing.

Residential Real Estate Broker Commissions Antitrust Settlements

Multiple residential real estate brokerages, franchise systems, and the National Association of Realtors (NAR) have reached antitrust settlements totaling over $1 billion regarding their practices related to real estate broker commissions.

Gotham Comedy Club Ticket Service Fee Settlement

Gotham Comedy Foundation, Inc. and related entities allegedly failed to properly disclose service charges for tickets purchased electronically to the Gotham Comedy Club in New York City, in violation of New York Arts and Cultural Affairs Law. The defendants deny wrongdoing but agreed to the settlement to avoid the costs and uncertainties of continuing the lawsuit.

Paid The service charge amount paid (Gotham Comedy Club charged $4.50 per ticket)

Tax Relief Helpers Pre-recorded Calls Settlement

Tax Relief Helpers, Inc. sent pre-recorded calls to consumers' cellphones. The company is paying to settle claims related to these calls.

Owings v. Medusind Data Breach Settlement

Medusind, Inc., a medical and dental billing and software company, experienced a data incident on December 29, 2023, when unauthorized parties infiltrated its computer systems, gaining access to settlement class members' private information including names, addresses, email addresses, phone numbers, health insurance information, payment information, medical records, and government identification numbers.

Paid $100–$5,100

Brannon v. Rancho Family Medical Group Data Breach Settlement

In November 2023, unauthorized access of personal information occurred at KMJ Health Service, a service provider of Rancho Family Medical Group, Inc. RFMG notified affected individuals about the incident. The company has agreed to settle the resulting class action lawsuit.

Paid Out-of-Pocket Losses (documented); Attested Time claims; Pro Rata Cash Payments; three years of credit monitoring (enrollment required)

Cascade Surgicenter Data Incident Settlement

In October 2023, Cascade Surgicenter and Neuromusculoskeletal Center of the Cascades experienced a targeted cyberattack that compromised their computer systems. Certain files containing personal information—including names, addresses, Social Security numbers, financial account details, credit card information, medical records, and health insurance information—were accessed. The defendants deny wrongdoing, and the court has not decided the merits of the case.

Landmark Admin Data Breach Settlement

Landmark Admin, LLC and related insurance companies experienced a data security incident from May 13, 2024 to June 17, 2024, in which private information of certain individuals was potentially accessed, compromised, or impacted. The defendants deny all claims and allegations of wrongdoing.

Oklahoma Surgical Hospital Data Tracking Settlement

Oklahoma Surgical Hospital used tracking technology and tools on its websites that improperly shared patient data with third parties like Meta and Google without patients' knowledge or consent. OSH denies all allegations and wrongdoing but agreed to the settlement to avoid further litigation costs.

Paid Up to $12

University of Minnesota Data Breach Settlement

The University of Minnesota experienced unauthorized access to or exfiltration of personal information from its Legacy Data Warehouse in August 2021. The University posted a Notice of Data Incident on its website in September 2023. The University is settling claims related to this data breach without admitting wrongdoing.

Reid Health Pixel Data Settlement

Reid Health disclosed confidential personally identifiable information and protected health information to third-party technologies without patient consent, specifically through the Meta pixel and other website tracking, analytics and advertising technologies on its websites. Reid Health denies all claims but agreed to the settlement to avoid litigation costs and uncertainties.

Paid Up to $25

T-Mobile SMB Account Executive Fair Labor Standards Act Settlement

T-Mobile USA, Inc. is settling a Fair Labor Standards Act collective action lawsuit filed on behalf of current and former employees working under SMB Account Executive titles. The lawsuit alleges wage and hour violations during specified periods. T-Mobile denies wrongdoing and contends it paid all employees correctly but is settling to avoid litigation costs and business disruptions.

Paid Payments based on allocation for initial Account Executive training period and/or the number of weeks worked as SMB Account Executive during specified Covid-19 pandemic periods; half subject to payroll tax deductions, half treated as non-wage income reported on Form 1099

48forty Solutions LLC Data Breach Settlement

Cyber criminals uploaded a virus onto 48forty Solutions LLC's systems in December 2021, potentially accessing personal information including names and Social Security numbers of current and former employees. The company was sued for allegedly failing to take appropriate care to protect employee data from the breach.

Paid Up to $50

Regal Medical Group Data Breach Settlement

Defendants announced in February 2023 that a data breach had occurred involving the private information of settlement class members. The breach allegedly affected medical information protected under the Confidentiality of Medical Information Act (CMIA) and the California Consumer Privacy Act (CCPA). Defendants have agreed to settle without admitting wrongdoing.

Paid Up to $10,000

Alamo Ticket Fees Settlement

Alamo Intermediate II Holdings, LLC allegedly did not disclose convenience fees for electronic movie tickets at its New York state cinemas prior to purchase, in violation of New York Arts and Cultural Affairs Law. The defendant denies wrongdoing but agreed to settle to avoid litigation costs and uncertainty.

Paid Pro rata portion of the Settlement Fund based on total amount of convenience fees paid

Maui Fires Class Settlement

A number of companies, individuals, and Hawai'i government entities caused damages through the August 2023 Maui wildfires (Lahaina, Olinda, and Kula fires). The defendants have agreed to settle related class action lawsuits to avoid the costs, risks, and uncertainties of continuing litigation. The defendants deny any wrongdoing.

Pacific Guardian Life Insurance Data Breach Settlement

Cybercriminals accessed Pacific Guardian Life Insurance Company's systems on or about August 25, 2023, potentially compromising individuals' private information including names, Social Security numbers, financial account information, payment card information, dates of birth, and medical information. Plaintiffs allege negligence, negligence per se, breach of implied contract, unjust enrichment, invasion of privacy, and violations of various Hawaii laws.

Fortive Data Security Litigation Settlement

Fortive Corporation and its subsidiaries allegedly had a data incident that compromised the personal information of class members. Defendants deny any wrongdoing. The settlement provides compensation and identity theft protection services to affected individuals.

Paid $5–$5,000

Arhaus Pricing and Sales Advertising Settlement

Arhaus engaged in pricing and sales advertising practices that misled customers. The company listed products with both a sale price and a higher reference price (sometimes with a strike-through), but customers who purchased these products did not receive appropriate refunds or credits. Arhaus has agreed to settle the lawsuit.

Paid Pro rata share of the Net Settlement Amount in the form of a store credit gift card or a cash payment, based on your total qualifying purchase amount during the Settlement Class Period divided by the total combined qualifying purchase amount of all Claimants.

Navy Federal Credit Union Unauthorized Transaction Claims Denial Settlement

Navy Federal Credit Union allegedly violated the Electronic Funds Transfer Act by improperly denying members' claims for unauthorized electronic fund transfers, failing to provide sufficient explanation for denials, and failing to provide documents relied upon in making decisions. Navy Federal denies wrongdoing but agreed to the settlement to avoid litigation costs and uncertainties.

Paid Pro rata (equal) portion of the Settlement Fund for each valid and timely claim submitted

Willis-Knighton Medical Center Patient Portal Data Breach Settlement

Willis-Knighton Medical Center experienced a data breach affecting patient portal account holders and those who made requests to schedule appointments online. The settlement compensates affected individuals for this privacy incident.

Paid Compensation of varying amounts depending upon what sub-class you are a member of. The amount will be stated in the Notice you may receive regarding the Settlement.

AT&T Data Breach Settlement

AT&T announced two data incidents: on March 30, 2024, AT&T-specific data fields were found on the dark web (AT&T 1 Data Incident); and on July 12, 2024, limited data was illegally downloaded from an AT&T workspace on a Snowflake cloud platform (AT&T 2 Data Incident). The data exposed included names, addresses, telephone numbers, email addresses, dates of birth, account passcodes, billing account numbers, Social Security numbers, and call interaction data. AT&T settled the consolidated lawsuits without admitting liability or wrongdoing.

Paid Up to $5,000

HelloFresh Automatic Renewal Settlement

HelloFresh charged California customers for their first automatic renewal product subscription shipment without their knowledge or consent. The settlement requires HelloFresh to change how it advertises automatically renewing subscriptions on its website and to provide restitution to eligible customers. HelloFresh denies liability.

NBA Top Shot Video Privacy Settlement

NBA Properties, Inc. and Dapper Labs, Inc. allegedly disclosed NBA Top Shot account holders' personally identifiable information to Meta via the Meta Tracking Pixel on the nbatopshot.com website without proper consent, in violation of the Video Privacy Protection Act (VPPA) and California law. The defendants deny wrongdoing but agreed to the settlement to avoid litigation costs and uncertainties.

Paid $36–$122

JOOLA Gen 3 Paddle Settlement

Sport Squad, Inc. (which markets JOOLA paddles) is settling a class action lawsuit. Consumers who own JOOLA Gen 3 Paddles can claim compensation and have their paddles returned via prepaid shipping. The defendant does not admit any wrongdoing, and the settlement is not an admission of liability.

Paid $150–$300

Western Express TCPA Settlement

Western Express allegedly violated the Telephone Consumer Protection Act (TCPA) by sending pre-recorded calls to cellular telephone numbers. Western Express denies that it violated the law.

Paid Up to $120

MedQ Data Breach Settlement

MedQ, Inc. experienced a targeted cyberattack on its computer systems on or about December 26, 2023, in which certain files containing private information were accessed. The compromised files may have contained personal information including names, Social Security numbers, driver's license numbers, dates of birth, health information, diagnoses, lab results, medications, health insurance information, and treatment details. MedQ denies any wrongdoing.

Geaslin v. Colony Ridge Development TCPA Text Message Settlement

Colony Ridge Development sent unsolicited advertising and marketing text messages to residential cellular phone numbers without obtaining prior express written consent, in violation of the Telephone Consumer Protection Act (TCPA). The defendant denies the allegations, but has agreed to settle the case to avoid the time, risk, and expense of litigation.

Paid $1,000–$2,000

Branford Manor Settlement

The Plaintiffs claim that the Defendants, the owner and management companies of Branford Manor, failed to properly maintain tenants' apartments during the settlement period, resulting in injuries and financial loss to tenants. The Defendants deny that apartments were improperly maintained or that tenants suffered injuries as a result of the building's condition.

Paid $1,000–$6,000

MLS Property Information Network Antitrust Settlement

MLS Property Information Network, Inc. allegedly participated in an anticompetitive agreement that resulted in residential real estate sellers paying inflated commissions to real estate brokers or agents in violation of antitrust law. The defendant has agreed to pay $3.95 million to settle these claims and implement business practice changes.

Nationals Discount Ticket Settlement

The Washington Nationals Baseball Club offered a discount ticket promotion (up to 30% off plus $5–$15 per ticket) exclusively to customers ages 21–39 between March 2023 and March 2024. Plaintiffs sued, alleging this age-based pricing violated Washington D.C.'s Human Rights Act and Consumer Protection Procedures Act. The defendant denies liability but has agreed to settle.

Paid Ticket credit of up to 30% off ticket price plus $5 to $15 per ticket, or cash payment (amount not specified)

Greater Cincinnati Behavioral Health Services Data Breach Settlement

In December 2023, unauthorized individuals allegedly accessed a database belonging to Greater Cincinnati Behavioral Health Services, compromising the private information of approximately 61,850 people, including names, Social Security numbers, driver's license numbers, health insurance information, and extensive healthcare data. GCBHS denies wrongdoing, and this settlement is a compromise to end the litigation.

Paid $60–$5,000

EyeMed Vision Care Data Breach Settlement

EyeMed failed to use appropriate data security, which led to an unauthorized third-party accessing patient personal data including names, contact details, dates of birth, health insurance information, Medicare/Medicaid numbers, driver's licenses, and government identification numbers in a data incident that occurred in June 2020. EyeMed denies wrongdoing and liability but has agreed to settle the class action lawsuit.

Paid $50–$10,000

McKoy v. Ott Cone & Redpath Data Breach Settlement

Cybercriminals gained unauthorized access to Ott Cone & Redpath's network in June 2024 and potentially accessed files containing private information of approximately 34,457 individuals. The defendant denies all wrongdoing and the settlement is not an admission of liability.

Paid $50–$2,500

Kis v. Cognism Right of Publicity Act Settlement

Cognism displayed individual contact information to free trial users, which the lawsuit alleges violated privacy laws in Alabama, California, Illinois, Indiana, Nevada, Ohio, and South Dakota. Cognism denies wrongdoing, and the parties settled to avoid the costs and risks of continuing litigation.

Film Forum Ticket Fee Settlement

Film Forum, Inc. allegedly failed to properly disclose a handling fee for movie tickets purchased in New York state, in violation of New York Arts and Cultural Affairs Law § 25.07(4). The defendant denies wrongdoing but agreed to settle to avoid the costs and uncertainties of continued litigation.

Paid Up to $4.16

EQT Corporation Securities Litigation Settlement

EQT Corporation shareholders allege they suffered losses in connection with the acquisition of Rice Midstream Partners. The defendants are accused of making misstatements regarding the transaction. The company has agreed to settle the securities litigation for $167.5 million without admitting wrongdoing.

UTMC Patient Portal Data Disclosure Settlement

University of Tennessee Medical Center allegedly disclosed confidential personally identifiable information and protected health information to third-party technology companies without consent. UTMC denies wrongdoing but agreed to settle to avoid litigation costs and uncertainties.

Paid Up to $25

J.B. Hunt Lytx Driver Camera Settlement

J.B. Hunt Transport installed Lytx inward-facing camera technology in its vehicles and recorded drivers' occurrences. The settlement was reached following a class action lawsuit alleging violations of the Illinois Biometric Information Privacy Act. J.B. Hunt denies any wrongdoing and does not admit to violating any law.

Arthur v. Oregon Community Credit Union TCPA Settlement

Oregon Community Credit Union placed artificial or prerecorded voice calls to people's cellular telephones without their consent in violation of the Telephone Consumer Protection Act (TCPA). The calls were made to non-members and non-accountholders between October 8, 2020 and April 4, 2025.

View Inc. Securities Litigation Settlement

Investors purchased View, Inc. (formerly CF Finance Acquisition Corp. II) securities during a specified period and are now participating in a settlement. The defendants have agreed to a settlement of $11 million to resolve securities claims, though the page does not specify what defendants allegedly did wrong or whether they admit liability.

Refresco Beverages US Inc. Data Breach Settlement

Refresco Beverages US Inc. experienced an unauthorized access incident to its computer network in March 2023, potentially exposing personal information of employees including names, dates of birth, Social Security numbers, addresses, financial account numbers, driver's license numbers, health insurance policy numbers, and health information related to workers' compensation and ADA accommodations.

Paid Up to $500 for out-of-pocket expenses; up to $100 for attested time spent (up to 5 hours at $20/hour); up to $5,000 for documented extraordinary loss

OneBlood Data Breach Settlement

OneBlood, Inc. experienced a data incident that compromised the private information of individuals. The defendant provided written notification of the data incident to affected individuals and is now settling the resulting class action lawsuit. Defendant denies any wrongdoing.

Paid $60–$2,500

FWAA Stockholder Litigation Settlement

Plaintiff Terry Jandreau sued defendants including Brendan Wallace and other officers and entities of FWAA over claims related to stockholder rights. The defendants have agreed to settle all claims in the action for $11,375,000 in cash. The defendants admit no wrongdoing.

Dobson Technologies Data Breach Settlement

Dobson Technologies Inc. experienced a targeted cyberattack on its computer systems between November 19, 2022 and March 3, 2023. Certain files containing private information may have been accessed, including names, identification numbers, financial account information, Social Security numbers, and medical information. Dobson denies any wrongdoing, and the parties have agreed to settle to avoid further litigation costs and uncertainty.

Butler v. Suffolk County Jail Settlement

From May 2011, plaintiffs sued Suffolk County on behalf of a class of detainees and inmates held in Suffolk County Correctional Facilities, alleging unconstitutional conditions. A settlement was reached in February 2025, with Suffolk County agreeing to pay $18 million to resolve the claims.

CarePro Data Incident Settlement

CarePro Health Services experienced a data breach on or about November 16, 2023, caused by unauthorized individuals. The breach potentially compromised personal information including names, contact information, dates of birth, state IDs, Social Security numbers, driver's license numbers, financial account information, and medical and health insurance information. CarePro denies any wrongdoing.

Shields Data Incident Settlement

Shields Health Care Group suffered a cyberattack on its computer network between March 7 and March 21, 2022, in which certain files containing patients' private information may have been accessed. Shields denies the claims but agreed to settle to avoid litigation costs and risks.

Aspirus Data Misuse Settlement

Aspirus, Inc. collected private data about its patients through its patient portal. The lawsuit alleged that Aspirus misused some of this private data. Aspirus denies any wrongdoing, and the settlement was reached to avoid the costs, risks, and uncertainties of continuing the litigation.

Olympus America Sales Representatives Wage & Hour Settlement

Olympus America allegedly misclassified sales representatives as overtime-exempt (salaried) employees during new hire sales training while they worked more than 40 hours per week reviewing training materials and studying for exams, and failed to pay overtime compensation. Olympus denies the allegations and maintains proper classification and compensation at all times.

Paid Payment amount based on number of weeks worked as Sales Representative during new hire sales training, subject to tax deductions on half the award (reported on W-2) and reported on IRS Form 1099 for the other half.

Fraser Child and Family Center Data Breach Settlement

Fraser Child and Family Center experienced a targeted cyberattack on its computer systems in May-June 2024. Certain files containing private information including names, Social Security numbers, dates of birth, addresses, and medical information may have been accessed.

Infosys McCamish Systems Data Breach Settlement

On November 2, 2023, Infosys McCamish Systems discovered that some of its systems were encrypted by ransomware. Investigation determined that unauthorized activity occurred between October 29 and November 2, 2023, during which data was subject to unauthorized access and acquisition. The compromised personal information included names, Social Security numbers, addresses, financial account numbers, dates of birth, and many other sensitive details. Class representatives allege the defendant inadequately safeguarded this personal information and provided late or deficient breach notice. The defendant denies all claims of wrongdoing.

Paid $30–$599

Eastern Radiologists Data Breach Settlement

Eastern Radiologists suffered a data breach discovered around November 24, 2023, that resulted in unauthorized access to their computer network and compromise of personally identifiable information and protected health information including names, Social Security numbers, addresses, financial account numbers, driver's license numbers, medical records, and other sensitive personal data.

Paid $0–$5,000

Transak USA Data Breach Settlement

Transak USA, LLC experienced a targeted cyberattack on its computer systems in September 2024 that compromised private information. Files accessed in the data incident may have contained addresses, driver's license numbers, and dates of birth. Transak denies wrongdoing.

Hall Depreciation Settlement - American Family Mutual Insurance

American Family Mutual Insurance Company allegedly improperly deducted Nonmaterial Depreciation when adjusting certain structural loss insurance claims in Wisconsin. The settlement resolves whether these deductions were appropriate.

Zubia v. American Family Insurance Depreciation Settlement

American Family Mutual Insurance Company and Homesite Insurance Company allegedly improperly deducted Nonmaterial Depreciation when adjusting certain structural loss insurance claims in Arizona.

Medical Associates of Brevard Data Breach Settlement

Medical Associates of Brevard was targeted by a cyberattack on its computer systems in January 2025. Files containing private information, including names, Social Security numbers, and personally identifiable health information, were accessed. The defendant denies wrongdoing and the court has not decided who is right.