Redfin data breach class action lawsuit overview:
- Who: Plaintiff Frankie Moreno filed a class action lawsuit against Redfin Corporation and its parent company, Rocket Limited Partnership, doing business as Rocket Companies.
- Why: Moreno claims Redfin failed to protect her sensitive personal information, which it allegedly kept for nearly four years after she left the company.
- Where: The Redfin class action lawsuit was filed in Washington federal court.
A new class action lawsuit accuses Redfin of failing to protect the sensitive personal information of its current and former employees in a data breach that exposed Social Security numbers and other private details.
Plaintiff Frankie Moreno worked for Redfin from approximately September 2020 to November 2022. She claims the company kept her information on its systems for nearly four years after she left.
Redfin is a residential real estate brokerage that helps people buy and sell homes. Its parent company, Rocket, is a homeownership platform and is also named as a defendant. Moreno claims Rocket controls how Redfin collects, stores and secures employee information.
Redfin reported the breach to Massachusetts regulators on or about Sept. 23, 2026, after learning an unauthorized third party had accessed personal information on its network. The exposed data includes names, Social Security numbers, financial account information and driver’s license numbers, the complaint says.
Moreno argues the breach notice fails to explain when the breach occurred, how long hackers had access to the data and how the breach happened. She also claims the two years of identity protection offered by the companies is insufficient to meet affected individuals’ needs.
The plaintiff wants to represent a nationwide class of all persons in the United States whose personal information was compromised as a result of the Redfin data breach.
Data breach lawsuit claims Redfin failed to implement basic security measures
Moreno claims she had to provide her Social Security number, driver’s license number and bank account information as a condition of employment.
She argues the companies relied on cheaper, ineffective security instead of basic safeguards, such as multifactor authentication, encryption, network monitoring and deleting data they no longer needed.
Moreno says she has experienced a dramatic increase in spam, which, she claims, suggests her information is now in the hands of cybercriminals. She has also spent significant time reviewing her credit reports.
The class action lawsuit asserts claims of negligence, breach of implied contract, unjust enrichment, invasion of privacy and violations of Washington consumer protection law. The plaintiff demands a jury trial and requests declaratory and injunctive relief, restitution and damages for herself and all class members.
Meanwhile, Redfin is facing another class action lawsuit accusing it of secretly sharing users’ private video-viewing activity and sensitive financial information with Meta and TikTok.
Were you notified of this Redfin data breach? Let us know in the comments.
The plaintiff is represented by Kaleigh N. Boyd of McNaul Ebel PLLC and J. Gerard Stranch IV, Grayson Wells and Sam Douthit of Stranch, Jennings & Garvey PLLC.
The Redfin class action lawsuit is Moreno v. Redfin Corporation, et al., Case No. 2:26-cv-03915, in the U.S. District Court for the Western District of Washington.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
Hair relaxer lawsuit: Were you diagnosed with cancer after using chemical hair straighteners?
October 26, 2026 | Legal News
