Squishable.com Data Breach Lawsuit Resolved with $500K Settlement

New to ClassAction.org? Read our Newswire Disclaimer

A $500,000 settlement has been reached to resolve a proposed class action lawsuit that claimed negligent cybersecurity on the part of Squishable.com resulted in the unauthorized exposure of the personal and financial data of thousands of customers in 2022.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

The official website for the Squishable data breach settlement can be found at OnlineToyDataBreachSettlement.com.

The deal with the toy and lifestyle products retailer, which was granted preliminary approval by the court on July 22, 2024, covers anyone in the United States whose personally identifiable information was involved in the Squishable data breach and who received a notice letter from the company regarding the incident, which reportedly occurred between May 26 and October 12, 2022.

To receive a Squishable settlement rebate, eligible class members must file a claim form online or by mail by November 19, 2024.

Per the website, you will need to provide the unique Claim Number and PIN found on the personalized settlement notice you should have received, though you may still submit a claim without this information.

According to the site, class members may file a claim for up to $200 reimbursement of “ordinary” losses that are supported by documentation and reasonably traceable to the data breach.

In addition, class members may make a claim for up to four hours of lost time spent dealing with issues linked to the incident, at a rate of $15 per hour, and capped at $60 per person, the settlement website shares.

The site notes that combined reimbursement for ordinary losses and lost time will not exceed $200 per person.

Moreover, class members who submit a timely, valid claim may be entitled to up to $2,500 per person for documented “extraordinary” losses that are fairly traceable to the Squishable data breach, the website says.

On top of the aforementioned benefits, class members who resided in California at the time of the incident are eligible to receive an additional $100 cash payment, the settlement site states.

According to the website, all settlement payout amounts may be reduced on a pro rata basis if necessary.

As part of the $500,000 deal, the retailer has also agreed to undertake certain steps to further secure its computer systems in response to the data breach, the site adds.

The court will decide whether to grant final approval to the terms of the Squishable settlement during a hearing set for February 6, 2025. Settlement payouts are typically issued to eligible class members after a deal is approved and any appeals are resolved.

The lawsuit against Squishable claimed that the data breach involved unauthorized code detected on Squishable.com that allowed an unknown third party to capture information entered on the checkout page as customers placed orders.

Per the data breach lawsuit, the months-long cyberattack impacted 15,961 current and former customers, compromising their names, addresses, email addresses, payment card details and other highly confidential information.

Check out ClassAction.org's lawsuit list for current class action lawsuits and investigations.