Privacy class action settlements
Class action settlements over privacy violations — website tracking, pixels, wiretapping, biometric data, and unauthorized data sharing.
Privacy settlements by the numbers
A settlement fund is the total a defendant agreed to pay, not what any one claimant receives — most funds are divided among everyone who files. Settlements are negotiated agreements, and defendants typically deny wrongdoing rather than being found liable.
The 179 settlements in this category that publish a fund, grouped by size. Most cluster low and a few are very large — which is why the headline figure above is a median rather than an average.
| Fund size | Settlements | Share | |
|---|---|---|---|
| Under $1M | 54 | 30% | |
| $1M – $5M | 62 | 35% | |
| $5M – $25M | 24 | 13% | |
| $25M – $100M | 4 | 2% | |
| $100M and up | 35 | 20% |
A fund is the total a defendant agreed to pay, not an individual payout.
Get new claim opportunities by email
Free alerts for new settlements and deadlines. Unsubscribe anytime.
Accepting claims now
Period Tracker Data Privacy Settlement (Flo, Google, Flurry)
Between November 2016 and February 2019, the Flo period and ovulation tracker app allegedly incorporated code from third-party software development kits (from Flurry, Meta, and Google) through which user information related to menstruation and pregnancy was allegedly shared without proper legal authorization. Google agreed to pay $48 million, Flo agreed to pay $8 million, and Flurry agreed to pay $3.5 million to settle. All defendants deny wrongdoing and assert they did nothing wrong.
…moreNot stated
Lands' End Data Breach Settlement
Lands' End experienced a data security incident in December 2024 that compromised certain files containing personal information of class members, including names, dates of birth, Social Security numbers, driver's license and passport information, and in some cases medical information. Lands' End denies wrongdoing, but has agreed to settle the lawsuit to avoid costs and risks of continued litigation.
…moreForbes Media Website Tracker Class Action Settlement
Forbes Media collected IP addresses and unique identifiers without consent using trackers on its websites between December 20, 2023 and June 11, 2026, and shared this data with third parties, allegedly in violation of California's Invasion of Privacy Act and Unfair Competition Law. Forbes denies these allegations and any wrongdoing.
…morePro rata payments from the Settlement Fund after deductions for administration costs, court-awarded attorneys' fees and costs, and incentive awards
American Vision Partners Data Breach Settlement
American Vision Partners suffered a cyberattack discovered in November 2023 that compromised personal information of approximately 1.6 million U.S. residents, including Social Security numbers for about 258,070 people. Plaintiffs allege personal information was compromised; the defendant denies this allegation.
…morePro-rata cash payments or out-of-pocket expense claims for Damages Settlement Class Members
Skin360 BIPA Settlement
Johnson & Johnson Consumer Inc. allegedly violated Illinois' Biometric Information Privacy Act (BIPA) by collecting, storing, disclosing, and profiting from biometric identifiers and information from people who scanned their faces during Skin360 skin assessments without providing required written disclosures and obtaining written consent. The defendant denies wrongdoing and admits no violation.
…moreEqual payment to all valid claimants from the $4.7 million Settlement Fund, minus Settlement Administrator costs, attorneys' fees (up to one-third of the fund), and service payments to Class Representatives (up to $5,000 each)
Wayne Memorial Hospital Data Breach Settlement
Wayne Memorial Hospital had a data incident discovered on or around June 3, 2024, in which certain files may have been accessed without authorization between approximately May 30 and June 3, 2024. The hospital notified potentially impacted individuals on or around August 27, 2025. The lawsuit alleges the hospital was negligent in failing to prevent the data incident. The hospital denies all allegations.
…morePrivacy cases in litigation
Filed and being fought in court. These are allegations — there is no settlement, no claim form and no payout yet.
Baylor Genetics Privacy Class Action
A proposed class action against Baylor Miraca Genetics Laboratories LLC (d/b/a Baylor Genetics), apparently concerning privacy or data-related claims involving its genetic testing services. The complaint was filed by Emily Frenkel; specific allegations are not detailed in the docket text and remain to be proven.
…moreWCG Health Management TCPA Class Action
A proposed class action against WCG Health Management Inc., apparently concerning alleged violations of the Telephone Consumer Protection Act. The plaintiff claims the defendant made unsolicited telephone calls or text messages without proper consent. These are allegations in a newly filed case, not proven facts and not yet a settlement.
…moreVaultio TCPA Class Action
A proposed class action against Vaultio was filed in federal court, apparently concerning alleged violations of the Telephone Consumer Protection Act. The docket indicates the case involves a TCPA claim, but does not provide specifics about the alleged calls or texts. These are allegations in a newly filed case and have not been proven.
…moreGlobal Uprising TCPA Class Action
A proposed class action against Global Uprising, PBC, doing business as Cotopaxi, apparently alleging violations of the Telephone Consumer Protection Act. The case was removed from state court to federal court. The available docket text does not describe the specific conduct, but the nature of suit indicates claims concerning unsolicited phone calls or text messages.
…moreMedimpact Healthcare Systems Data Breach Class Action
A proposed class action against Medimpact Healthcare Systems, Inc., apparently concerning a data breach or privacy incident involving personal information. The allegations are new and have not been proven.
EFPTR LLC Telephone Consumer Protection Act Class Action
This is a proposed class action against EFPTR LLC, apparently concerning alleged violations of the Telephone Consumer Protection Act. The case was removed from Davidson County Circuit Court to federal court. The docket text does not detail the specific alleged conduct, but TCPA cases typically involve claims about unwanted telemarketing calls, robocalls, or text messages.
…moreIntravene Mobile IV Therapy TCPA Class Action
A proposed class action against Intravene Mobile IV Therapy, apparently alleging violations of the Telephone Consumer Protection Act. Based on the docket, the claims likely concern unsolicited calls or text messages to consumers. The case was removed to federal court from state court.
…moreBetterMe Class Action
A proposed class action against BetterMe, Inc., apparently concerning claims under federal or state consumer protection statutes. The available docket text does not describe specific factual allegations, but the nature of suit is 'Other Statutory Actions,' and BetterMe is a consumer-facing health and fitness app company. The case appears to be brought by an individual plaintiff on behalf of a putative class.
…moreOura Smart Ring Class Action
A proposed class action has been filed against Oura Inc. The specific allegations are not detailed in the docket, but based on the defendant, the case appears to concern the company's wearable smart ring products or related health data practices. These are allegations only, not proven facts.
…moreBuzzFeed Media Enterprises Consumer Class Action
A proposed class action has been filed against BuzzFeed Media Enterprises, Inc. in federal court. Without access to the complaint text, the precise allegations cannot be determined from the caption alone, but the nature of the suit and defendant profile suggest potential claims relating to consumer or user rights, possibly involving privacy, data practices, or terms of service issues affecting BuzzFeed's audience.
…moreLuminis Health Patient Data Class Action
A proposed class action against Luminis Health, Inc. filed in federal court in Maryland. While specific allegations are not detailed in the available docket information, the personal property nature of suit code suggests the case may involve claims related to patient data, privacy rights, or similar consumer harm. Additional details about the specific allegations would be needed to fully characterize the dispute.
…moreOpenAI Consumer Class Action
This is a proposed class action against OpenAI OpCo, LLC. The available caption and docket metadata do not specify the exact claims, but the case appears to concern OpenAI's consumer-facing AI services. The allegations are unproven and no settlement has been reached.
…moreClosed to new claims
Past the filing deadline — kept so you can look up what a case was about and what it paid.
Total Vision Data Breach Settlement
Total Vision experienced a data security incident on October 30, 2020, that exposed patients' and others' personal information. Plaintiffs claim Total Vision failed to adequately protect this information. Total Vision denies any wrongdoing and has not admitted to any violations.
…morePaid Up to $1,000
Healthcare Services Group Data Breach Settlement
Healthcare Services Group, Inc. suffered a cybersecurity data breach on or around September 27, 2024, which exposed employee personally identifiable information including names, Social Security numbers, driver's license numbers, state identification numbers, financial account details, full access credentials, and medical and health insurance information. HCSG denies any wrongdoing.
…morePaid Up to $5,000
ApolloMD Data Breach Settlement
A data security incident at ApolloMD on or around May 22, 2025, may have allowed an unauthorized third party to access files containing private information of patients treated by ApolloMD's affiliated physicians and practices. ApolloMD denies these claims and maintains it did nothing wrong.
…morePhysicians' Primary Care Data Incident Settlement
Physicians Primary Care of Southwest Florida experienced a targeted cyberattack on its computer systems in September 2024. Certain files containing private information—such as names, Social Security numbers, and health information—were accessed. The defendant denies wrongdoing, but has agreed to settle the class action lawsuit to avoid ongoing litigation costs and risks.
…moreAmy Crull v. University of St. Thomas Data Breach Settlement
University of St. Thomas experienced an unauthorized data breach between July 25, 2025 and August 12, 2025 that compromised personal information including credit card numbers, bank account information, Social Security Numbers, passports, licenses, work account logins and passwords, home addresses, email addresses, phone numbers, and other confidential documents. UST denies any wrongdoing.
…morePaid $50–$5,100
Atrium Health Pixel Technology Settlement
Atrium Health improperly used pixel technology in connection with its MyAtriumHealth and MyCarolinas patient portal accounts. The health system has agreed to settle a class action lawsuit over this use of tracking technology without admitting wrongdoing.
…moreCentral Valley Meat Co. Data Breach Settlement
Central Valley Meat Co's computer systems were compromised in May 2024, potentially exposing private information including names and Social Security numbers. Central Valley denies wrongdoing, and the parties agreed to settle to avoid ongoing litigation costs and risks.
…moreMount Sinai Data Breach Settlement
Mount Sinai Medical Center of Florida disclosed protected health information and personally identifying information of patients through tracking, analytics, and advertising technologies on its website and patient portal to third parties. The disclosure occurred between June 10, 2021 and September 18, 2025.
…morePaid Up to $20
Columbus Regional Health Data Breach Settlement
Columbus Regional Health allegedly disclosed patients' personal identifiable information (PII) and protected health information (PHI) to third-party technologies without patient consent. Columbus Regional denies wrongdoing but agreed to the settlement to avoid litigation costs and uncertainty.
…morePaid Up to $25.50
Naper Grove Data Breach Settlement
Naper Grove Vision Care, P.C. experienced a targeted cyberattack on its computer systems in May 2025. Files containing private information were accessed, including names combined with Social Security numbers and other non-public personally identifiable information. Naper Grove denies wrongdoing, and the parties have agreed to settle to avoid further litigation costs and risks.
…moreAspire Health Alliance Data Breach Settlement
Aspire Health Alliance suffered a targeted cyberattack on its computer systems in September 2023 that potentially exposed certain files containing private information including names, dates of birth, medical service dates, insurance policy numbers, physician information, medical conditions or treatment information, and Medicare or Medicaid numbers. Aspire denies wrongdoing, and the parties settled to avoid the costs and uncertainties of continued litigation.
…moreSchuster Company Data Breach Settlement
In January 2024, Schuster Company experienced a cybersecurity incident involving their computer systems where certain files containing personal information may have been accessed. The stolen data potentially included names, Social Security numbers, dates of birth, and driver's license numbers or state identification information. Schuster denies any wrongdoing, and the parties settled to avoid continued litigation costs and risks.
…moreHunley v. Pineland Community Service Board Data Breach Settlement
A cybersecurity incident involving Pineland Community Service Board occurred from November 2024 to January 2025, resulting in potentially unauthorized access to or acquisition of settlement class members' private information. The defendant denies any wrongdoing or liability, but has agreed to settle the lawsuits to avoid the risk, cost, and time of continuing litigation.
…moreAllina Pixel Settlement
Allina Health System allegedly disclosed certain personal or health-related information to third parties. The defendant denies these allegations but agreed to settle the class action lawsuit.
Lemonade Data Disclosure Settlement
Lemonade, Inc. and Lemonade Insurance Agency, LLC experienced an unauthorized data exposure involving their online insurance quote platform between April 2023 and September 18, 2024. Personal information such as driver's license numbers was compromised, and affected individuals were notified in April and June 2025.
…moreParks Heritage Federal Credit Union Data Breach Settlement
Parks Heritage Federal Credit Union suffered a targeted cyberattack in July 2024 that accessed files containing private member information including names, Social Security numbers, financial information, and credit card/debit card numbers. Parks Heritage denies wrongdoing, and the parties have agreed to settle the lawsuit to avoid the costs and uncertainties of continuing litigation.
…moreBanner Health Data Breach Settlement
Banner Health allegedly disclosed patients' personally identifiable information and protected health information to third parties including Meta (Facebook) and Google through tracking technologies on its website and patient portal. This allegedly violated patients' privacy rights and applicable laws. Banner denies all wrongdoing.
…morePaid Up to $20
Lucent Health Solutions Data Breach Settlement
Lucent Health Solutions, LLC suffered a targeted cyberattack in October 2023 that compromised certain computer systems. Files containing private information such as names, dates of birth, health/dental/vision policy numbers and member IDs, and plan numbers may have been accessed. The defendant denies wrongdoing.
…moreLabcorp Data Breach Settlement
Labcorp allegedly suffered a data breach involving customer diagnostic services information through American Medical Collection Agency. The company has agreed to settle for $35 million related to this alleged security breach.
MOVEit Data Breach Settlement - GRIPA
In May 2023, Greater Rochester Independent Practice Association suffered a data breach involving MOVEit Transfer file transfer software. The breach exposed personally identifiable information and protected healthcare information of individuals, including names, dates of birth, Social Security numbers, health information, and insurance details. GRIPA is settling claims related to this breach, though litigation against Progress Software Corporation (the MOVEit software licensor) continues.
…morePaid $100–$12,500
Okanogan Behavioral Healthcare Data Breach Settlement
Okanogan Behavioral Healthcare (OBHC) experienced an unauthorized data incident discovered in May 2024 that exposed sensitive patient information including names, addresses, dates of birth, Social Security numbers, driver's license numbers, identification numbers, and medical and health insurance information. OBHC denies any wrongdoing.
…morePaid $50–$5,350
Omni Healthcare Data Breach Settlement
In January 2024, an unauthorized third party conducted a cyberattack on Omni Healthcare's network and accessed certain files containing personal and medical information. The accessed files may have contained names, dates of birth, medical information, Social Security numbers, health insurance information, and financial account information. Omni Healthcare denies wrongdoing, and the parties agreed to settle to avoid the costs and uncertainties of continued litigation.
…moreEquifax Duplicate Reporting Settlement
Equifax allegedly violated the Fair Credit Reporting Act by wrongfully reporting duplicate negative accounts on consumer credit reports, with inadequate data-keeping policies. These duplicated debt tradelines made some customers' debts appear larger than they actually were, potentially preventing them from securing loans, credit cards, mortgages and other lines of credit. Equifax denies wrongdoing.
…morePaid Up to $600
Serviceaide Data Breach Settlement
Serviceaide, Inc. experienced unauthorized access to its computer systems and network between September 19, 2024, and November 5, 2024, which exposed the private information of current and former patients of Catholic Health. The lawsuit alleges negligence, breach of implied contract, unjust enrichment, and invasion of privacy. The defendant denies all wrongdoing.
…more