California Consumer Records Act

August 11, 2025 Keenan has agreed to pay a settlement to resolve a class action that alleged the firm failed to protect personal information during a 2023 data breach.

March 10, 2025 LoanDepot has agreed to pay more than $86 million to settle a class action that claimed negligent cybersecurity was to blame for a January 2024 data breach.

March 4, 2025 Dameron Hospital has agreed to pay a $650,000 settlement to resolve a class action over a 2023 data breach that compromised the personal information of 262,475 people.

January 24, 2025 Nonstop has agreed to pay a $1.6 million settlement to resolve a class action that alleged the insurer failed to protect the personal information of 8,500 people during a December 2022 data breach.

January 23, 2025 Professional Finance Company has agreed to pay $2,500,000 to settle a class action lawsuit over a February 2022 data breach.

November 14, 2024 A settlement has been reached to resolve a class action that alleged negligent cybersecurity on the part of Ardagh Glass resulted in a 2021 data breach.

November 12, 2024 A settlement has been reached to resolve a class action that alleged Oak Valley Hospital failed to prevent a 2023 data breach.

October 10, 2024 Disney faces a class action over a “massive” July 2024 data breach in which personal information belonging to staff members and guests was reportedly leaked.

August 29, 2024 A class action alleges Capital One illegally tracked, shared and monetized website users’ private information without their knowledge or consent.

May 7, 2024 CNU faces a class action over a February 2023 cyberattack during which hackers gained access to highly sensitive employee and student data.

April 18, 2024 City of Hope has been hit with a class action over a 2023 cyberattack that compromised the private data of approximately 827,000 patients.

April 5, 2024 Crossroads Equipment Lease & Finance has been hit with a class action over a targeted cyberattack that reportedly occurred in early April 2023.

February 7, 2024 Arizona Labor Force faces a class action that claims deficient data security resulted in the unauthorized disclosure of current and former employees’ personal data.

January 25, 2024 LoanDepot faces a proposed class action lawsuit over a January 2024 data breach that reportedly impacted roughly 16.6 million people.

October 19, 2023 Prospect Medical Holdings, Inc. faces a class action that claims the healthcare corporation failed to protect private employee and patient data during an August 2023 cyberattack.

September 28, 2023 Amerita, Inc. faces a class action that claims the company failed to protect consumers’ personal information during a cyberattack reportedly discovered in March 2023.

September 13, 2023 A class action lawsuit claims Chevron Federal Credit Union failed to protect the personal information of current and former customers from a May 2023 cyberattack.

September 11, 2023 Tesla Motors, Inc. faces a class action over an apparent data breach the automaker said was caused by two ex-employees.

June 29, 2023 Another proposed class action lawsuit claims negligence on the part of the Housing Authority of the City of Los Angeles (HACLA) is to blame for a data breach that went undetected for almost a full year.

May 18, 2023 A class action lawsuit claims Weee!, a major online Asian and Hispanic grocery delivery startup, failed to protect the personal information of at least 1.1 million customers during a February 2023 data breach.

March 6, 2023 A class action lawsuit claims the negligence of four major healthcare networks in Southern California resulted in a “foreseeable” data breach that compromised the personal information of over three million patients.

May 20, 2022 SuperCare Health, Inc. faces a class action over its apparent failure to safeguard the personal information of more than 318,000 current and former patients during a data breach last summer.

December 10, 2021 Planned Parenthood Los Angeles faces a class action that alleges an October 2021 data breach stemmed from the facility’s failure to secure patients’ highly sensitive information.