Staples class action claims company negligent in employee data theft

Staples class action lawsuit overview:

• Who: Plaintiff Eric Carroll filed a class action lawsuit against Staples Inc.
• Why: Carroll claims Staples failed to protect the personal information of its current and former employees during a recent data breach.
• Where: The class action lawsuit was filed in Massachusetts federal court.

A new class action lawsuit alleges Staples failed to protect the personal information of its current and former employees during a recent data breach.

Plaintiff Eric Carroll claims cybercriminals infiltrated Staples’ computer systems and stole the personally identifiable information (PII) of its current and former employees during a data breach which occurred on or around March 11. 

Carroll argues the data breach was due to Staples failing to adequately train its employees on cybersecurity and maintain reasonable security safeguards to protect the personally identified information, leaving it vulnerable to cybercriminals.

“The exposure of one’s PII to cybercriminals is a bell that cannot be unrung. Before this data breach, its current and former employees’ private information was exactly that—private,” the Staples class action lawsuit says. 

Carroll wants to represent a nationwide class of individuals whose PII was compromised in the Staples data breach discovered in March 2026.

Staples data breach exposed employee information, class action claims

The data breach exposed sensitive information such as names, Social Security numbers, financial account information, health insurance information and driver’s license information, according to the Staples class action. 

Carroll, meanwhile, argues the data breach caused widespread injury and monetary damages and that Staples has not yet notified those affected by the data breach, leaving them in the dark about the exposure of their private information.

“Defendant’s failure to notify Plaintiff and the Class about the Data Breach shows that Defendant cannot—or will not—determine the full scope of the Data Breach, as Defendant has been unable to determine precisely what information was stolen and when,” the Staples class action lawsuit says. 

Carroll claims Staples is guilty of negligence, breach of contract, invasion of privacy and unjust enrichment. 

The plaintiff demands a jury trial and requests declaratory and injunctive relief and an award of compensatory, exemplary, punitive damages and statutory damages for himself and all class members. 

In another recent data breach lawsuit, a consumer sued SoFi Technologies over claims it failed to adequately protect consumers’ personal information in a late 2025 data incident.

Were you affected by the Staples data breach? Let us know in the comments.

The plaintiff is represented by Anthony I. Paronich of Paronich Law P.C. and Raina C. Borrelli of Strauss Borrelli PLLC.

The Staples class action lawsuit is Carroll, et al. v. Staples Inc., Case No. 1:26-cv-11336, in the U.S. District Court for the District of Massachusetts.

Read About More Class Action Lawsuits & Class Action Settlements:

• SweetLeaf class action claims monk fruit ‘organic’ sweetener is mostly erythritol
• 3 Day Blinds under fire as class action targets alleged deceptive spam email tactics
• Crunchyroll class action alleges data breach exposed PII of 6.8M users
• Lincoln recalls 2026 Navigators due to driver seat malfunction