Salesforce hit with class action lawsuit over massive data breach affecting Farmers Insurance customers

Salesforce data breach class action overview:

• Who: Plaintiff Malcolm Scott filed a class action lawsuit against Salesforce Inc.
• Why: Scott claims Salesforce failed to properly safeguard consumer information in connection with a data breach.
• Where: The class action lawsuit was filed in California federal court.

A new class action lawsuit alleges Salesforce failed to properly safeguard consumer information in connection with a data breach earlier this year.

Plaintiff Malcolm Scott claims Salesforce disclosed the personal information of consumers — including names, addresses, dates of birth, driver’s license numbers and partial Social Security numbers — to unauthorized third parties during a data breach in or around May 2025.

Salesforce is a cloud-based software company that provides its services to various corporate clients throughout the country in sales, customer service, marketing automation, e-commerce, analytics, artificial intelligence and application development, according to the Salesforce class action.

Scott wants to represent a nationwide class of individuals who were impacted by the Salesforce data breach, including all persons who were sent notice by Farmers Insurance or any other client of Salesforce that their personal information was compromised as a result of the data breach.

Salesforce data breach impacted 1.1M Farmers customers, class action claims

The class action lawsuit argues Salesforce failed to adequately secure its servers and systems and jeopardized the security of consumers’ personal information, which the plaintiff claims is now in the hands of criminals.

“Accordingly, these individuals now must take immediate and time-consuming action to protect themselves from such identity theft and fraud,” the Salesforce class action lawsuit says.

Scott claims Salesforce is guilty of negligence, negligence per se, breach of implied contract, breach of fiduciary duty, invasion of privacy and unjust enrichment and also violated the California Unfair Competition Law and the Driver’s Privacy Protection Act.

The plaintiff demands a jury trial and requests declaratory and injunctive relief and an award of actual and statutory damages, punitive damages, monetary damages, interest, fees and costs.

In 2020, Salesforce suffered a data breach that exposed the personal information of Hanna Andersson customers, and it took Salesforce more than two weeks to alert both Hanna Andersson and its customers.

Have you been affected by this Salesforce data breach? Let us know in the comments.

The plaintiff is represented by Tina Wolfson, Robert Ahdoot and Bradley K. King of Ahdoot & Wolfson P.C., John J. Nelson and Gary M. Klinger of Milberg Coleman Bryson Phillips Grossman PLLC and William “Billy” Peerce Howard of The Consumer Protection Firm PLLC.

The Salesforce data breach class action lawsuit is Scott v. Salesforce Inc., Case No. 3:25-cv-07232, in the U.S. District Court for the Northern District of California.

Read About More Class Action Lawsuits & Class Action Settlements:

• FDA recalls Kroger frozen shrimp amid radiation concerns
• RYOBI recalls 780K pressure washers due to safety risks
• FTC refunds issued in August 2025: Who’s getting paid?
• Quaker accused of misleading shoppers with Life Cereal marketing