PayPal data breach class action overview:Â
- Who: Two PayPal users are suing the e-commerce company.Â
- Why: The plaintiffs allege PayPal was negligent in the storage of their information, leading to a data breach.
- Where: The PayPal data breach class action was filed in a California federal court.
PayPal was negligent in its storage of customers’ sensitive personal information, resulting in a data breach that exposed the personal data of tens-of-thousands of users, a new class action lawsuit alleges.
Plaintiffs Ashley Pillard and Destiny Rucker filed the class action lawsuit against PayPal Inc. on March 2 in a California federal court, alleging violations of state and federal consumer laws.Â
According to the lawsuit, PayPal failed to properly secure and safeguard its customers’ sensitive records from hackers, leading to a major cyber attack.Â
In January, PayPal notified its users of a data breach that exposed the personal data of nearly 35,000 users.Â
According to the lawsuit, on Jan. 18, PayPal filed official notice of a hacking incident with the Office of the Maine Attorney General and sent out data breach letters to individuals whose information was compromised.
Based on the notice filed by the company PayPal first detected unusual activity on some of its computer systems on Dec. 20, 2022. In response, the company conducted an investigation. PayPal’s investigation revealed that an unauthorized party had access to certain company files between December 6, 2022 and December 8, 2022.
PayPal would have discovered breach earlier if it wasn’t negligent with data security, lawsuit alleges
The information compromised in the data breach included highly sensitive data that represents a “gold mine for data thieves,” the lawsuit states.Â
It included names, addresses, Social Security numbers, individual tax identification numbers, and/or dates of birth as well as additional personally identifiable information that PayPal collected and maintained.
PayPal and its employees failed to properly monitor the computer network and systems that housed the private information, the plaintiffs allege. Had PayPal properly monitored its networks, it would have discovered the breach sooner, they say.
“Plaintiffs and Class Members were, and continue to be, at significant risk of identity theft and various other forms of personal, social, and financial harm,” the plaintiffs state. “The risk will remain for their respective lifetimes.”
The plaintiffs seek to represent a nationwide class of people who had their private information stolen as a result of the data breach, plus a Nebraska subclass and Texas subclass.
The plaintiffs are suing for negligence, breach of contract and violation of state consumer laws, and seek damages, reimbursement of out-of-pocket costs, and injunctive relief including improvements to PayPal’s data security systems, future annual audits, and adequate credit monitoring services funded by PayPal.
What do you think of the allegations against PayPal in this case? Let us know in the comments!Â
The plaintiff is represented by Kyle McLean, Mason Barney and Steven D. Cohen of Siri & Glimstad LLP.Â
The PayPal class action lawsuit is Ashley Pillard et al., v. PayPal Inc., Case No. 5:23-cv-00936 in the U.S. District Court for the Northern District of California.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
1,346 thoughts onPayPal class action claims company failed to safeguard customer information prior to data breach
Add me my account has been charged for a phone and money has be took off my account too.
Add me account been compromised haven’t received notice
Add me. My account was logged into with money taken out
Add me account been compromised haven’t received notice
Please add me
Add me, received notices that account was compromised
Please add me. I was not told of the breach until I was checking my email and I started seeing all these $800 cell phone recites. It looked so real I thought it Was Actually Paypal. After I logged in to Paypal and went to the help desk,I saw the big pink banner asking me to send any Emails, pretending to be paypal, to them at their “phishing” email- but also that I should delete the email after forwarding it to them. I kept some of the emails just in case- cause why would they want me to delete and not save the evidence? if they would have told people sooner and had better security/without all of our information just there for the taking, maybe we could have had a better grasp of the situation. At least we would have known to be on the lookout for the fraudulent charges. The amount of info lost and being sold somewhere in the dark web/in other countries around the world is Unacceptable. Thanks for trading all my info (some companies & credit bureaus more than once have been breached.) Thanks for my numerous free credit reports, the monitoring my Identity on the dark web, the free restoration services from the wonderful companies who lost my info to begin with.
Please add me
Please add me to the settlement because l received an email talking about Bitcoin Michigan
My data was hacked opened a pay Pal line of credit in my name and still fighting for access to my account
Add me
Please add me. My data was breach. I kept seeing all these transactions. Also my email address was changed. I contacted PayPal and was told it was an error. They never told me it was a data breach. There were purchases from other businesses in other states.