Workday data breach class action lawsuit overview:
- Who: Juan Elias and Saroj Panigrahy filed a class action lawsuit against Workday Inc. and Salesforce Inc.
- Why: Elias and Panigrahy claim Workday and Salesforce are responsible for a 2025 data breach that compromised the personal information of millions of consumers.
- Where: The class action lawsuit was filed in California federal court.
A new class action lawsuit alleges Workday and Salesforce are responsible for a 2025 data breach that compromised the personal information of millions of consumers.
Plaintiffs Juan Elias and Saroj Panigrahy claim the data breach resulted in the unauthorized access and exfiltration of sensitive personal identifiable information (PII) of millions of consumers.
Elias and Panigrahy argue the data breach was highly preventable and involved techniques and vulnerabilities known to the defendants in advance.
Workday confirmed in August 2025 that it had been targeted by threat actors who accessed information via a recent social engineering campaign, according to the Workday class action.
Elias and Panigrahy want to represent a nationwide class of individuals whose PII was compromised in the Workday data breach.
Workday, Salesforce failed to implement ‘fundamental’ security measures, class action says
Elias and Panigrahy claim the data breach occurred because Salesforce’s Data Loader portal, used by Workday to import or export Salesforce data, was “easily mimicked” by bad actors.
The class action lawsuit further argues Salesforce warned its customers about the specific type of voice phishing attack that would be used against Workday, yet the defendants allegedly failed to implement fundamental security measures to prevent the breach.
PII compromised in the data breach included names, addresses, dates of birth, driver’s license numbers, and partial Social Security numbers, according to the Workday class action.
Elias and Panigrahy argue that, as a result of the data breach, they and class members have suffered injuries, including invasion of privacy, lost time and expenses mitigating the risk of data misuse, and a diminishment in the value of their PII.
The class action lawsuit claims Workday and Salesforce are guilty of negligence, breach of implied contract and unjust enrichment, and in violation of California’s Consumer Privacy Act and Unfair Competition Law.
The plaintiffs demand a jury trial and request declaratory and injunctive relief and an award of actual, statutory, nominal, consequential and punitive damages for themselves and all class members.
Last year, a California federal judge certified a separate class action lawsuit filed against Workday over claims the company uses an applicant screening process that disproportionately disqualifies people over the age of 40.
Were you affected by the Workday data breach? Let us know in the comments.
The plaintiffs are represented by Dena C. Sharp and Adam E. Polk of Girard Sharp LLP; Christopher L. Lebsock, James J. Pizzirusso, Nicholas U. Murphy and Steven M. Nathan of Hausfeld LLP; and Jason L. Lichtman and Sean A. Petterson of Lieff Cabraser Heimann & Bernstein LLP.
The Workday data breach class action lawsuit is Elias, et al. v. Workday, Inc., et al., Case No. 3:26-cv-00725, in the U.S. District Court for the Northern District of California.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
