Data breach class action settlements
Class action settlements from data breaches and security incidents that exposed consumers' personal information.
Data breach settlements by the numbers
A settlement fund is the total a defendant agreed to pay, not what any one claimant receives — most funds are divided among everyone who files. Settlements are negotiated agreements, and defendants typically deny wrongdoing rather than being found liable.
The 167 settlements in this category that publish a fund, grouped by size. Most cluster low and a few are very large — which is why the headline figure above is a median rather than an average.
| Fund size | Settlements | Share | |
|---|---|---|---|
| Under $1M | 74 | 44% | |
| $1M – $5M | 61 | 37% | |
| $5M – $25M | 23 | 14% | |
| $25M – $100M | 5 | 3% | |
| $100M and up | 4 | 2% |
A fund is the total a defendant agreed to pay, not an individual payout.
Get new claim opportunities by email
Free alerts for new settlements and deadlines. Unsubscribe anytime.
Accepting claims now
Period Tracker Data Privacy Settlement (Flo, Google, Flurry)
Between November 2016 and February 2019, the Flo period and ovulation tracker app allegedly incorporated code from third-party software development kits (from Flurry, Meta, and Google) through which user information related to menstruation and pregnancy was allegedly shared without proper legal authorization. Google agreed to pay $48 million, Flo agreed to pay $8 million, and Flurry agreed to pay $3.5 million to settle. All defendants deny wrongdoing and assert they did nothing wrong.
…moreNot stated
Lands' End Data Breach Settlement
Lands' End experienced a data security incident in December 2024 that compromised certain files containing personal information of class members, including names, dates of birth, Social Security numbers, driver's license and passport information, and in some cases medical information. Lands' End denies wrongdoing, but has agreed to settle the lawsuit to avoid costs and risks of continued litigation.
…moreAmerican Vision Partners Data Breach Settlement
American Vision Partners suffered a cyberattack discovered in November 2023 that compromised personal information of approximately 1.6 million U.S. residents, including Social Security numbers for about 258,070 people. Plaintiffs allege personal information was compromised; the defendant denies this allegation.
…morePro-rata cash payments or out-of-pocket expense claims for Damages Settlement Class Members
Wayne Memorial Hospital Data Breach Settlement
Wayne Memorial Hospital had a data incident discovered on or around June 3, 2024, in which certain files may have been accessed without authorization between approximately May 30 and June 3, 2024. The hospital notified potentially impacted individuals on or around August 27, 2025. The lawsuit alleges the hospital was negligent in failing to prevent the data incident. The hospital denies all allegations.
…moreData breach cases in litigation
Filed and being fought in court. These are allegations — there is no settlement, no claim form and no payout yet.
Medimpact Healthcare Systems Data Breach Class Action
A proposed class action against Medimpact Healthcare Systems, Inc., apparently concerning a data breach or privacy incident involving personal information. The allegations are new and have not been proven.
Luminis Health Patient Data Class Action
A proposed class action against Luminis Health, Inc. filed in federal court in Maryland. While specific allegations are not detailed in the available docket information, the personal property nature of suit code suggests the case may involve claims related to patient data, privacy rights, or similar consumer harm. Additional details about the specific allegations would be needed to fully characterize the dispute.
…moreGainwell Technologies Data Breach Class Action
A proposed class action against Gainwell Technologies LLC concerning an apparent data breach. The complaint alleges harm to individuals whose personal information may have been compromised, as indicated by the attached data breach notification letter. Gainwell Technologies is a healthcare technology company, and the case involves alleged breach of contract and related consumer harm.
…morePasquini v. Ziff Davis Data Breach or Fraud Class Action
This proposed class action alleges fraud against Ziff Davis, Inc., apparently concerning unauthorized access to consumer data or deceptive practices affecting ordinary customers or users of the company's platforms or services. The case was recently filed in federal court based on claims of fraud.
…moreSullivan v. IDScan.net Data Breach Class Action
A proposed class action alleging that IDScan.net, Inc., apparently a provider of identity-scanning or verification services, allegedly mishandled personal data or failed to protect against unauthorized access. The complaint was filed by Dillon Sullivan in federal court in Louisiana with a jury demand, suggesting allegations that ordinary consumers or account holders may have been affected by a data breach or privacy violation.
…moreMcCoy v. Lowe's Companies Data Breach Class Action
A proposed class action against Lowe's Companies, Inc. apparently concerning a personal property matter. Based on the filing classification, the allegations likely involve a data breach, privacy incident, or similar consumer harm affecting ordinary customers or account holders of the retailer.
…moreTa v. Quantum Health Data Breach Class Action
This proposed class action against Quantum Health, Inc. appears to concern alleged property damage or product liability issues, potentially related to a data breach or privacy failure affecting consumers or account holders. The complaint was filed in federal court in Ohio with a jury demand, but specific allegations cannot be determined from the docket entries provided.
…moreRioux v. IDscan.net Data Breach Class Action
A proposed class action against IDscan.net, Inc., apparently concerning a data breach or privacy violation involving consumer identity or personal information. The exact allegations are not fully detailed in the available docket information, but the case appears to involve claims related to the company's handling of customer data.
…moreHall v. Baylor Miraca Genetics Laboratories Data/Testing Class Action
A proposed class action against Baylor Miraca Genetics Laboratories, LLC concerning alleged mishandling or unauthorized use of genetic testing data or samples. The case is in early stages with the defendant having recently obtained an extension to respond to the complaint.
…moreHeckler v. BMW of North America Data Breach Class Action
A proposed class action against BMW of North America, LLC concerning alleged fraud. The complaint references BMW maintenance records from 2021 and 2026, suggesting the lawsuit may allege improper handling of consumer vehicle maintenance data or related consumer fraud claims involving BMW customers.
…moreKlappa-Cales v. Utz Brands Data Breach Class Action
This proposed class action alleges fraud against Utz Brands, Inc. and Utz Quality Foods, LLC. Based on the limited docket information available, the case concerns an apparent consumer-facing dispute, though specific allegations are not detailed in the docket entries. The plaintiffs named are individuals (Ashten Klappa-Cales and Viola Hasala) who have been served and the court has set an initial status hearing.
…moreWeddle v. Paylogix Data Breach Class Action
A proposed class action alleges that Paylogix, LLC experienced a data breach affecting consumers' personal information. The complaint references a notice of data event and notices sent to affected individuals, suggesting claims related to inadequate data security or breach notification practices.
…moreClosed to new claims
Past the filing deadline — kept so you can look up what a case was about and what it paid.
Total Vision Data Breach Settlement
Total Vision experienced a data security incident on October 30, 2020, that exposed patients' and others' personal information. Plaintiffs claim Total Vision failed to adequately protect this information. Total Vision denies any wrongdoing and has not admitted to any violations.
…morePaid Up to $1,000
Healthcare Services Group Data Breach Settlement
Healthcare Services Group, Inc. suffered a cybersecurity data breach on or around September 27, 2024, which exposed employee personally identifiable information including names, Social Security numbers, driver's license numbers, state identification numbers, financial account details, full access credentials, and medical and health insurance information. HCSG denies any wrongdoing.
…morePaid Up to $5,000
ApolloMD Data Breach Settlement
A data security incident at ApolloMD on or around May 22, 2025, may have allowed an unauthorized third party to access files containing private information of patients treated by ApolloMD's affiliated physicians and practices. ApolloMD denies these claims and maintains it did nothing wrong.
…morePhysicians' Primary Care Data Incident Settlement
Physicians Primary Care of Southwest Florida experienced a targeted cyberattack on its computer systems in September 2024. Certain files containing private information—such as names, Social Security numbers, and health information—were accessed. The defendant denies wrongdoing, but has agreed to settle the class action lawsuit to avoid ongoing litigation costs and risks.
…moreAmy Crull v. University of St. Thomas Data Breach Settlement
University of St. Thomas experienced an unauthorized data breach between July 25, 2025 and August 12, 2025 that compromised personal information including credit card numbers, bank account information, Social Security Numbers, passports, licenses, work account logins and passwords, home addresses, email addresses, phone numbers, and other confidential documents. UST denies any wrongdoing.
…morePaid $50–$5,100
Atrium Health Pixel Technology Settlement
Atrium Health improperly used pixel technology in connection with its MyAtriumHealth and MyCarolinas patient portal accounts. The health system has agreed to settle a class action lawsuit over this use of tracking technology without admitting wrongdoing.
…moreCentral Valley Meat Co. Data Breach Settlement
Central Valley Meat Co's computer systems were compromised in May 2024, potentially exposing private information including names and Social Security numbers. Central Valley denies wrongdoing, and the parties agreed to settle to avoid ongoing litigation costs and risks.
…moreMount Sinai Data Breach Settlement
Mount Sinai Medical Center of Florida disclosed protected health information and personally identifying information of patients through tracking, analytics, and advertising technologies on its website and patient portal to third parties. The disclosure occurred between June 10, 2021 and September 18, 2025.
…morePaid Up to $20
Columbus Regional Health Data Breach Settlement
Columbus Regional Health allegedly disclosed patients' personal identifiable information (PII) and protected health information (PHI) to third-party technologies without patient consent. Columbus Regional denies wrongdoing but agreed to the settlement to avoid litigation costs and uncertainty.
…morePaid Up to $25.50
Naper Grove Data Breach Settlement
Naper Grove Vision Care, P.C. experienced a targeted cyberattack on its computer systems in May 2025. Files containing private information were accessed, including names combined with Social Security numbers and other non-public personally identifiable information. Naper Grove denies wrongdoing, and the parties have agreed to settle to avoid further litigation costs and risks.
…moreAmerican Consumer Credit Counseling Data Breach Settlement
In January 2025, a criminal third party gained unauthorized access to certain employee email accounts at American Consumer Credit Counseling, Inc. (ACCC). The breach resulted in the potential exposure of personally identifiable information including names, Social Security numbers, driver's license numbers, financial account numbers, and payment card information. ACCC denies wrongdoing and liability, and the court has made no determination of liability.
…moreAspire Health Alliance Data Breach Settlement
Aspire Health Alliance suffered a targeted cyberattack on its computer systems in September 2023 that potentially exposed certain files containing private information including names, dates of birth, medical service dates, insurance policy numbers, physician information, medical conditions or treatment information, and Medicare or Medicaid numbers. Aspire denies wrongdoing, and the parties settled to avoid the costs and uncertainties of continued litigation.
…moreMurphy v. Western Montana Clinic Data Breach Settlement
Western Montana Clinic experienced a data breach between March 11, 2025, and April 15, 2025, in which an unauthorized third party accessed a WMC employee email account containing personal health information of individuals.
Comcast Data Breach Settlement
In October 2023, a third-party gained unauthorized access to Comcast customers' personal information in a cybersecurity incident. Comcast denies that it engaged in any wrongdoing or violated any law.
Paid Cash payments to Settlement Class Members, reimbursement for documented out-of-pocket losses and lost time, and Identity Defense Services and Restoration Services
Schuster Company Data Breach Settlement
In January 2024, Schuster Company experienced a cybersecurity incident involving their computer systems where certain files containing personal information may have been accessed. The stolen data potentially included names, Social Security numbers, dates of birth, and driver's license numbers or state identification information. Schuster denies any wrongdoing, and the parties settled to avoid continued litigation costs and risks.
…moreSTIIIZY Data Breach Settlement
STIIIZY, Inc. experienced a data breach in October 2024 where personal information and private health information was allegedly accessed, compromised, or stolen from the company's servers. The breach was announced on January 7, 2025. STIIIZY denies the allegations and all liability.
…moreHunley v. Pineland Community Service Board Data Breach Settlement
A cybersecurity incident involving Pineland Community Service Board occurred from November 2024 to January 2025, resulting in potentially unauthorized access to or acquisition of settlement class members' private information. The defendant denies any wrongdoing or liability, but has agreed to settle the lawsuits to avoid the risk, cost, and time of continuing litigation.
…moreAllina Pixel Settlement
Allina Health System allegedly disclosed certain personal or health-related information to third parties. The defendant denies these allegations but agreed to settle the class action lawsuit.
Lemonade Data Disclosure Settlement
Lemonade, Inc. and Lemonade Insurance Agency, LLC experienced an unauthorized data exposure involving their online insurance quote platform between April 2023 and September 18, 2024. Personal information such as driver's license numbers was compromised, and affected individuals were notified in April and June 2025.
…moreParks Heritage Federal Credit Union Data Breach Settlement
Parks Heritage Federal Credit Union suffered a targeted cyberattack in July 2024 that accessed files containing private member information including names, Social Security numbers, financial information, and credit card/debit card numbers. Parks Heritage denies wrongdoing, and the parties have agreed to settle the lawsuit to avoid the costs and uncertainties of continuing litigation.
…moreBanner Health Data Breach Settlement
Banner Health allegedly disclosed patients' personally identifiable information and protected health information to third parties including Meta (Facebook) and Google through tracking technologies on its website and patient portal. This allegedly violated patients' privacy rights and applicable laws. Banner denies all wrongdoing.
…morePaid Up to $20
Lucent Health Solutions Data Breach Settlement
Lucent Health Solutions, LLC suffered a targeted cyberattack in October 2023 that compromised certain computer systems. Files containing private information such as names, dates of birth, health/dental/vision policy numbers and member IDs, and plan numbers may have been accessed. The defendant denies wrongdoing.
…moreAbbott Laboratories Employees Credit Union Data Breach Settlement
Abbott Laboratories Employees Credit Union ("ALEC") experienced a targeted cyberattack on its computer systems in August 2024. Files containing private information such as names, financial account information, and Social Security numbers were accessed. ALEC denies wrongdoing, and the parties agreed to settle to avoid the costs and risks of ongoing litigation.
…moreCircle K (Gas Express) Data Breach Settlement
Circle K experienced a targeted cyberattack on its computer systems in May 2024 in which certain files containing private information were accessed. These files may have contained personal information such as names and Social Security numbers. Circle K denies that it did anything wrong, and the parties agreed to settle to avoid ongoing litigation costs and uncertainties.
…more