Last Update: 10/27/2026 at 6:00 AM EST

Data Breach Class Actions

Coverage from The Jerusalem Post, Reuters, and others

Data Breach Class Actions topic image

Data breach class actions bring together claims by individuals who allege that companies did not adequately safeguard personal, financial, employee, or health information.

Cases arise across sectors including healthcare, finance, retail, technology, and professional services, and may follow incidents involving ransomware, phishing, unauthorized access, or third-party vendors. Plaintiffs may allege failures in security, notification, or response and invoke different legal duties, including privacy statutes and common-law claims. The litigation examines how organizations handled sensitive data and what remedies affected people may seek; allegations and outcomes vary from case to case.

Looking Back
668 Day Timeline
2024Jan 1Mar 4May 27Jul 29Oct 21Dec 232025Jan 1Mar 5May 28Jul 30Oct 22Dec 242026Jan 1Mar 5May 28Jul 30Oct 22Dec 24
History
10/03/2026

The update adds further examples of the same ongoing breach-related litigation, without materially changing the story’s scope or implications.

All Articles47 articles
Important22 articles · CI Score 60 and above
The Jerusalem Post
Mercor faced California class-action lawsuits after a reported breach exposed contractor interview recordings, facial biometric data, and device-related screenshots.
4/27/2026 • Data Breaches & Exposure Events • General
Reuters / Mike Scarcella
Jason Perry sued WilmerHale in federal court July 14, alleging a May cyberattack exposed personally identifiable information including Social Security numbers across multiple states.
7/15/2026 • Data Breaches & Exposure Events • General
Reuters / Mike Scarcella
Jason Perry sued WilmerHale in District of Columbia federal court in July over an alleged May breach exposing names and Social Security numbers, with Vermont breach notice listing affected residents.
7/15/2026 • Data Breaches & Exposure Events • General
Reuters / Karen Sloan
Laura Delapaz filed a proposed class action in Pennsylvania federal court against Blank Rome after a May 21 data breach allegedly exposed clients Social Security numbers and other taxpayer data.
7/6/2026 • Data Breaches & Exposure Events • General
Value Added Resource / Liz Morton
Douglas Larson filed a proposed federal class action in New Mexico on August 5, 2026, alleging Beckett failed to protect customer records exposed in a November 2025 breach.
8/6/2026 • Data Breaches & Exposure Events • General
Startup Fortune / Dave Barr
Three proposed class actions filed in Northern California in April 2026 accuse Chime of concealing an Iran-linked hack that disrupted customers and allegedly exposed personal data.
8/1/2026 • Data Breaches & Exposure Events • General
BroBible / Douglas Charles
Sean Mortazi filed a California class action in 2026 alleging a TikTok data breach in June 2026 exposed personal and location information for 2.4 billion users.
7/17/2026 • Data Breaches & Exposure Events • General
Rocket City Now
Billy Parker filed a class-action in Madison County, Alabama, alleging Huntsville Hospital Health System violated HIPAA duties after a Cerner-linked cyberattack exposed patient medical and financial records.
7/2/2026 • Data Breaches & Exposure Events • General
Starlocalmedia
A Potts Law Firm class action in Taylor County, Texas alleges Hendrick Health and Xsolis delayed patient breach notice after a January 2025 phishing attack.
6/18/2026 • Cybersecurity (Privacy-Relevant) • General
Hypebot / Bruce Houghton
Live Nation and Ticketmaster faced a 560-million-record data breach MDL in Montana and an FTC case joined by seven state attorneys general, pending dismissal review.
5/25/2026 • Data Breaches & Exposure Events • General
CRE Daily
Michelle Milewski filed a proposed class action in New York after Cushman & Wakefield confirmed a May 5 voice-phishing breach allegedly exposing client data.
5/15/2026 • Data Breaches & Exposure Events • General
New York Post
A proposed class action in the Southern District of New York alleges Cushman & Wakefield failed to protect client personal data after a vishing-based cyberattack.
5/12/2026 • Data Breaches & Exposure Events • General
PYMNTS.com
Mercor faced class-action lawsuits after a reported data breach on April 23, with allegations involving exposed facial biometric data, job interview recordings, and contractor information.
4/23/2026 • Data Breaches & Exposure Events • General
Staffing Industry Analysts
Mercor faced six proposed class action lawsuits in federal courts in Northern California and Northern Texas after a breach allegedly exposed contractors Social Security, passport, and biometric data.
4/14/2026 • Data Breaches & Exposure Events • General
Claim Depot / Brandon Richards
Sean Mortazi filed a California class action against TikTok Inc. in June 2026 alleging a data breach exposed personal data of more than 2.4 billion users.
7/10/2026 • Data Breaches & Exposure Events • General
Reuters
Derrick Burkett filed a proposed class action in Washington, D.C., accusing Wiley Rein of failing to protect Microsoft 365 data stolen via phishing and notifying victims around March 2026.
5/26/2026 • Data Breaches & Exposure Events • General
DataBreaches.net
Sean Mortazi filed a June 11, 2026 class action in California alleging TikTok unencrypted data enabled an alleged breach exposing personal data of 2.4 billion users.
7/11/2026 • Data Breaches & Exposure Events • General
PR Newswire
Potts Law Firm filed a Taylor County class action alleging Xsolis phishing caused a delayed June 2026 breach notice for potentially exposed patient data at Hendrick Health.
6/18/2026 • Data Breaches & Exposure Events • General
Westlaw Today
Between April 2 and April 6, 2026, U.S. federal courts saw class actions against health care and tech firms over alleged 2025 data breaches exposing sensitive identifiers and patient records.
4/10/2026 • Data Breaches & Exposure Events • General
Claim Depot
WilmerHale notified 489 Texas, Massachusetts, and Vermont residents on July 10, 2026, after an employee disclosed names and Social Security numbers to an unauthorized third party.
7/29/2026 • Data Breaches & Exposure Events • General
Bloomberg Law
Blank Rome LLP faced two proposed class actions in the Eastern District of Pennsylvania, filed July 6, 2026, alleging a May data incident exposed sensitive personal, financial, and health information for more than 57,000 clients.
7/6/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Attorneys working with ClassAction.org are investigating a potential class action after DocketWise disclosed an October 2025 third-party repository breach affecting 116,666 people.
4/6/2026 • Data Breaches & Exposure Events • General
Interesting25 articles · CI Score 45–59
LawFuel
Blank Rome faced proposed federal class actions after a social-engineering cyberattack exposed sensitive client data for more than 57,000 individuals.
7/8/2026 • Data Breaches & Exposure Events • General
National Mortgage News / Andrew Martinez
Ricky LaFountain sued United Wholesale Mortgage in federal court in Michigan in connection with a Mercadien vendor breach disclosed in November.
7/2/2026 • Data Breaches & Exposure Events • General
Westlaw Today / Westlaw Today
Federal class actions filed June 17 to June 23, 2026 in multiple U.S. districts allege cybersecurity failures exposed sensitive personal data at healthcare, security, retail, and energy companies.
6/26/2026 • Data Breaches & Exposure Events • General
Westlaw Today
Between June 9 and June 10, proposed class actions in U.S. federal courts alleged healthcare, financial, real estate, and hospitality companies failed to protect sensitive personal data from phishing and ransomware.
6/12/2026 • Data Breaches & Exposure Events • General
Tennessee Bar Association
Florida resident Derrick Burkett sued Washington, D.C. firm Wiley Rein in 2026, alleging delayed detection and notice of a cyberattack leading to dark-web sale of consumer data.
5/28/2026 • Data Breaches & Exposure Events • General
Legalnewsline
Brian Magadan filed a proposed nationwide class action in the Middle District of Louisiana against Grace Design Studios over alleged PII and PHI exposure after a Payouts King ransomware attack.
5/22/2026 • Data Breaches & Exposure Events • General
The Real Deal
Michelle Milewski filed a proposed class action in the Southern District of New York after a reported ShinyHunters extortion cyberattack exposed client PII at Cushman & Wakefield.
5/13/2026 • Data Breaches & Exposure Events • General
The National Law Review
Edelson Lechtzin LLP investigates privacy claims after American Lending Center ransomware incident exposed Social Security numbers and dates of birth in July 2025.
5/12/2026 • Data Breaches & Exposure Events • General
Banking Dive / Gabrielle Saulsbery
Michael Walsh and other Chime customers filed proposed class actions after Team 313 allegedly stole PII during an April 1 cyberattack.
5/6/2026 • Data Breaches & Exposure Events • General
HR Dive
Plaintiffs filed April 1 class-action suits in Northern District of California alleging Mercor suffered a March data breach exposing sensitive personal data and seeking damages and injunctive relief.
4/13/2026 • Data Breaches & Exposure Events • General
Class Action Defense
Duane Morris partners say data breach and privacy class actions escalated across the United States in 2025 due to ransomware and broader data exposures.
2/5/2026 • Data Breaches & Exposure Events • General
Yahoo News
Intoxalock customers sued Consumer Safety Technology in federal court in Iowa in March 2026 after a cyberattack allegedly exposed information and disabled ignition interlock devices nationwide.
7/30/2026 • Data Breaches & Exposure Events • General
Bloomberg Law
Judge Maria A. Lanahan on July 24 allowed a proposed class action against Walsworth Publishing Co. to proceed over a 2024 breach affecting over 100,000 people.
7/27/2026 • Data Breaches & Exposure Events • General
Bloomberg Law News
Jason Perry filed a proposed class action in the US District Court for the District of Columbia against WilmerHale after a May data breach notification on July 10.
7/15/2026 • Data Breaches & Exposure Events • General
Claim Depot
Shamis & Gentile P.A. investigates a PLAY ransomware-claimed EMA Engineering & Consulting breach first disclosed to the Texas Attorney General on July 1, 2026.
7/1/2026 • Data Breaches & Exposure Events • General
Top Class Actions
Castaneda and Goodloe filed a Northern District of California class action on April 3, 2026, alleging Chime Financial failed to protect customer PII in an April 2026 data breach.
5/1/2026 • Data Breaches & Exposure Events • General
Top Class Actions
Betty Lackey filed a class action in Minnesota alleging Ameriprise failed to secure client PII after a March ShinyHunters ransomware breach.
4/17/2026 • Data Breaches & Exposure Events • General
ClassAction.org / Tracy Bagdonas
Plaintiffs filed a proposed class action alleging Chime suffered an April 2026 data breach, exposing personally identifiable information and increasing fraud and identity theft risk.
4/14/2026 • Data Breaches & Exposure Events • General
ClassAction.org / Olivia DeRicco
A proposed class action filed in 2025 alleges Opexus failed to prevent a February 2025 insider-driven breach of sensitive federal records and delayed actionable breach notification.
4/7/2026 • Data Breaches & Exposure Events • General
Top Class Actions
Maria Gomez filed a Nike class action in Oregon over an alleged January 21, 2026 ransomware breach and February 25, 2026 consumer notification delay.
4/6/2026 • Data Breaches & Exposure Events • General
Claim Depot / Brandon Richards
Cindy Castaneda and Lauren Goodloe filed a Chime Financial class action on April 3, 2026 in San Francisco over an April 1, 2026 cyberattack and alleged data exposure and delayed notice.
4/3/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Alert Medical Alarms disclosed a June 17 2025 data breach in Pennsylvania, prompting potential class action litigation over exposed personal and health data.
2/23/2026 • Data Breaches & Exposure Events • General
ClassAction.org
CF Medical disclosed in 2024 that a February vendor breach at FBCS potentially exposed personal information for 626,396 people, prompting class action evaluation.
10/8/2024 • Data Breaches & Exposure Events • General
Scamicide
Everest ransomware targeted Liberty Mutual on April 30 using a supply chain attack, and Massachusetts customers filed a proposed class action over alleged negligence.
5/26/2026 • Data Breaches & Exposure Events • General
ClassAction.org
ClassAction.org attorneys investigated a potential class action for alleged South Texas Spinal Clinic breach exposure after a June 15, 2026 dark web claim by The Gentlemen.
6/15/2026 • Data Breaches & Exposure Events • General