What is data breach class action?
A data breach class action is a lawsuit brought on behalf of individuals whose personal information was exposed in a security incident, typically alleging negligence, breach of contract, or violation of a state data breach or privacy statute against the company that held the data. Claimed harm ranges from actual identity theft to the increased risk of future fraud and the cost of credit monitoring.
The biggest legal hurdle in these cases is often standing, since federal courts disagree on whether an increased risk of future identity theft — without an actual fraudulent charge or theft yet occurring — counts as the kind of concrete injury required to sue, particularly after the Supreme Court's TransUnion decision. Settlements frequently provide a menu of options: reimbursement for documented out-of-pocket losses, a flat cash payment for time spent addressing the breach, and extended credit monitoring services, often through a claims-made structure.
Sources
Last reviewed 2026-08-22.