Cricket Wireless data breach class action overview:
- Who: Plaintiff Alexis Morgan, a Cricket Wireless customer, is suing the telecommunications company.
- Why: Morgan alleges the company was negligent with customer data and allowed it to be exposed in a data breach.
- Where: The Cricket Wireless data breach class action was filed in a Georgia federal court.
Cricket Wireless has been hit with a class action lawsuit after a major data breach that exposed the information of 10 million customers.
Plaintiff Alexis Morgan filed the class action lawsuit against Cricket Wireless LLC on July 23 in a Georgia federal court, alleging negligence, and that the company failed to secure sensitive personal information of its customers, resulting in a data breach.
“Defendant completely and utterly failed to protect its customers’ personal data and/or ensure that its third-party vendors protected customer data consistent with defendant’s privacy notice,” the Cricket Wireless data incident class action argues.
Sensitive data uploaded to Snowflake
Cricket Wireless, a major wireless service provider, collects extensive personal data from its subscribers, the lawsuit says.
According to Morgan, Cricket Wireless assured its customers that their data was secure through its privacy policy, which claimed that protecting customer information was “a priority.”
However, earlier this year, cybercriminals discovered that several major companies, including Cricket Wireless, had uploaded vast amounts of valuable and sensitive customer data to Snowflake, a third-party cloud platform, the lawsuit says.
The cybercriminals exploited Snowflake accounts that lacked proper authentication measures, gaining access to sensitive data, Morgan says. On July 22, 2024, Cricket Wireless announced that customer data had been illegally downloaded from its workspace on the Snowflake platform. The breach compromised records of calls and texts for nearly all Cricket Wireless customers between May 1, 2022, and Oct. 31, 2022, and Jan. 2, 2023. Cell site identification numbers and phone numbers were also exposed.
Cricket Wireless data breach affected 10 million customers, lawsuit claims
The lawsuit alleges that approximately 10 million customers were affected by the Cricket Wireless data incident.
Morgan says, despite learning of the breach in April 2024, Cricket Wireless did not notify its customers until three months later. The notification letter omitted critical details such as the root cause of the breach, the vulnerabilities exploited, and the remedial measures taken to prevent future breaches, she adds.
These details are still unclear, the lawsuit states, leaving affected customers uncertain about the security of their personal information.
“Defendant’s conduct, as evidenced by the circumstances of the Data Breach, has created a substantial risk of future identity theft, fraud, or other forms of exploitation,” the lawsuit states.
Morgan seeks to represent all customers whose information was exposed in the data breach. She is suing for negligence, breach of implied contract and unjust enrichment, and is seeking certification of the class action, damages, fees, costs and a jury trial. She also demands that Cricket Wireless implement stronger security measures to protect customer data in the future.
Meanwhile, multiple class action lawsuits have recently been filed against companies due to data breach incidents. The class action lawsuits argue that companies, including Intuit, Ticketmaster, Live Nation, AT&T and several others failed to adequately safeguard and secure consumers’ data in such a way that would have prevented the data breaches.
Were you affected by the Cricket Wireless data breach? Let us know in the comments!
The plaintiffs are represented by Thomas Sizemore and Paul J. Doolittle of Poulin | Willey | Anastopoulo.
The Cricket Wireless data breach class action lawsuit is Alexis Morgan v. Cricket Wireless LLC, Case No. 1:24-cv-03253-ELR in the U.S. District Court for the Northern District of Georgia.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
1,141 thoughts onCricket Wireless class action claims data breach affects 10M customers
I’ve been having problems with cricket and I just got a letter too in the mail about my information might be leak. Was wondering what to do on that
Yes, I received a text message from Cricket I am in Oregon
I received a message as we’ll and am sure on what to do
I’m from Texas
I was most definitely a customer a would like my fair compensation because I’ve had so many problems with this Wireless Carrier!!
How do I know if I’m affected.. actually I am my phone is tapped, weird things are going on with it, I tried to call 911 a few times and couldn’t get thru, they jammed my phone
I received a letter from cricket wireless and all 4 of my numbers were effected by the data breach how do I get included in this law suit.
I have received a letter from cricket wireless letting me know that my phone number was included in the data breach incident
I received a Cricket Data Incident letter, is that what I need to be included in the class action suite
I just got one from them too but heard about this what I need to do about this
I need to join this lawsuit
We get letters but nowhere to sign up for this. I dont trust that “you are included” thing. By the time it is over with, you either getting a voucher or two dollars. I want to claim emotional distress. I was at a point of thinking violent thoughts, as (1)my account was drained, (2) credit union dragging their feet on investigating, (3)had to get ugly after a week of them not even investigating, but trying to push a loan on us, (4)landlord showing their A##. (5)Called VA for help to include emotional, yeah, nothing. Mind you, never late with rent for the 12 years lived there, but they were threatening eviction, this just being week after due date! They were having monetary difficulties(Wife’s estravagant spending) and taking it out on us. They tried to do an eviction letter, adding additional charges. Town lawyer (KY-Because we can” seems to be their motto)stated that they can kick us out-No Tenant/landlord rights in KY. Took almost three weeks to get money returned by credit union. It should be partially their fault, as in the years Ive been with them, I have never used the Zelle app, a red flag. The hacker started by shutting down my phone (I believe an inside job). Cricket CS supposedly located in Florida. Person with Hispanic name used the Zelle App. Now I have to find the site for the National Public Data breach one as well.( Co. Located in Florida as well)since my alert stated they, the company, search the dark web and found info. Articles stated the info was stolen, but this corporation cheated by using this dark web, therefore should be put through the ringer for it. “We obtain information from various public record databases, court records, state and national databases and other repositories nationwide”
I received a letter in the mail. I read about the lawsuit last week. I think I was a customer during the time period stated.
I recently received a letter from cricket stating that my data has been breached then I find out there’s a class action lawsuit against cricket for that breach does that make me part of the lawsuit and what do I need to do to find out if I’m part of this lawsuit again cricket sent me a letter of apology for the data leak my name is Patrick mccolligan my phone number 5414857800
Looking forward to hearing from you guys about this class action lawsuit against cricket for data breach and if I am a claimant in this class action lawsuit
I received a letter from cricket about 3 weeks ago so what can I do
I received a letter from cricket saying the same thing about a month ago.