January 2026 Class Action Settlements Involve Toyota, Google and Cigna

Consumers affected by recalls, data breaches, privacy violations and other legal issues could benefit from settlements accepting claims in January.
$12.5M Keto pill class action settlement
Global E-Trading agreed to pay $12.5 million to resolve claims that it overcharged consumers for keto pills.
The Keto pill settlement benefits consumers who purchased a three-pack or five-pack of Ultra Fast Keto Boost, Instant Keto or InstaKeto pills.
According to the class action lawsuit, Global E-Trading intentionally conspired with retailers to overcharge consumers for various keto pills. This scheme allegedly caused financial harm to purchasers.
The deadline to file a claim with the settlement is Jan. 2, 2026.
Need Ways to Make Extra Money Outside Class Action Settlements?
If you’re not eligible for some of these class action settlements, there are other ways you can boost your income this month that are more in your control. Here are a few of our favorite ways to add some extra cash to your wallet:
| Offer | What You Can Earn | What You Have to Do | Take Action |
|---|---|---|---|
| InboxDollars | $225/month | Complete short surveys | |
| FreeCash | $1,000/month | Simple online tasks | |
| GoBranded | Up to $140/month | Share your honest opinion | |
| Solitaire Cash | Up to $83 per win | Compete against other players | |
| Bingo Cash | Up to $83 per win | Compete against other players | |
| Kashkick | $1,000/month | Try out apps |
Pfizer Depo-Provera class action investigation
Recent studies have found that long-term use of the injectable birth control Depo-Provera could be linked to an increased risk of developing brain tumors. Plaintiffs in litigation against the manufacturer, Pfizer, allege the company failed to adequately warn the public about these risks. If you were diagnosed with one or more meningiomas and used Depo-Provera, you may be entitled to compensation. Find out if you qualify.
Husqvarna grass trimmer class action settlement
Husqvarna agreed to a class action lawsuit settlement to resolve allegations that its gas-powered grass string trimmers posed a fire hazard.
The settlement benefits consumers who purchased certain Husqvarna gas-powered grass string trimmers (model numbers 130C, 130L and 330LK) on or before Nov. 13, 2023.
The Husqvarna string trimmers reportedly suffered from a defect that could lead to electric sparks or arcing that could cause a fire. Plaintiffs in the class action lawsuit claim that Husqvarna should have known about the defect and warned consumers of the risks associated with the products.
The deadline to file a claim with the settlement is Jan. 2, 2026.
$1.07M Cigna out-of-network providers class action settlement
Cigna agreed to pay $1.07 million to resolve claims that it caused patients to overpay for treatment by misclassifying out-of-network providers as in-network.
The settlement covers individuals covered by a LocalPlus plan for which Cigna provided administrative services and who underwent treatment and received an explanation of benefits indicating their out-of-network provider was in-network due to a mistake in how their plan’s benefits were configured.
According to plaintiffs in the class action lawsuit, Cigna misclassified certain out-of-network providers as in-network. This allegedly caused consumers to receive surprisingly high medical bills for providers they believed would be covered at a much higher rate.
The deadline to file a claim with the settlement is Jan. 5, 2026.
Nations Direct Mortgage data breach class action settlement
Nations Direct Mortgage (NDM) agreed to a settlement to resolve allegations that it failed to protect consumers from a 2023 data breach that compromised sensitive data.
The settlement benefits individuals who received a data breach notification from NDM informing them that their information may have been compromised in the December 2023 data breach.
The NDM data breach reportedly allowed third parties to steal sensitive consumer data, including Social Security numbers, birth dates and more. Plaintiffs in the class action lawsuit claim that NDM should have taken reasonable cybersecurity measures to protect their information.
The deadline to file a claim with the settlement is Jan. 7, 2026.
AirportParking.com and AirportParkingServices.com service charge class action settlement
CAVU eCommerce agreed to pay $425,000 to resolve claims that it failed to disclose mandatory service fees for online bookings through airportparkingreservations.com and airportparking.com.
The settlement benefits California residents who made a reservation through airportparkingreservations.com or airportparking.com and paid a mandatory service charge at checkout between July 1, 2024, and March 10, 2025.
CAVU eCommerce allegedly charged mandatory service fees on consumers’ online bookings but failed to properly disclose these fees to consumers. According to the class action lawsuit, the lack of disclosure violated California’s Honest Pricing Law.
The deadline to file a claim with the settlement is Jan. 15, 2026.
$12.88M Anthem mental health treatment class action settlement
Anthem agreed to a $12.88 million class action lawsuit settlement to resolve claims that it unfairly denied claims for mental health and substance abuse treatment.
The settlement benefits individuals whose coverage requests for residential treatment services for a behavioral health disorder were denied by Anthem since April 29, 2017, based on Anthem’s clinical coverage guidelines.
Plaintiffs in the class action lawsuit claim that Anthem widely denied claims for behavioral health treatments due to unfairly restrictive medical necessity guidelines. As a result of these guidelines, consumers were allegedly denied coverage for their mental health or substance abuse treatments.
The deadline to file a claim with the settlement is Jan. 20, 2026.
Johnson & Johnson baby powder class action investigation
The health care and biotech company Johnson & Johnson has faced multiple settlements involving claims that its baby powders contained asbestos, which has been linked to cancer. The company is accused of knowing its products contained asbestos and hiding it from the public. If you used Johnson & Johnson baby powder and were diagnosed with cancer, you could be entitled to compensation. See if you qualify.
$30M Google, YouTube kids privacy violations class action settlement
Google and YouTube agreed to pay $30 million to resolve claims that they collected personal data from children in violation of privacy laws.
The settlement benefits individuals who were under 13 years old and watched content directed toward children on YouTube between July 1, 2013, and April 1, 2020.
According to the class action lawsuit, Google and YouTube collected personal data from children watching child-directed content, such as cartoons and nursery rhymes. The companies allegedly used this unlawfully collected data for advertising purposes.
The deadline to file a claim with the settlement is Jan. 21, 2026.
$4.8M JustFab, ShoeDazzle and FabKids settlement provides refunds to consumers in 33 states
TFG Holdings agreed to a $4.8 million multi-state settlement with 33 attorneys general to resolve allegations surrounding its “VIP” membership programs and renewals.
The settlement benefits consumers in certain states who enrolled in a JustFab, ShoeDazzle or FabKids VIP program before May 31, 2016.
The state attorneys general claim that consumers were automatically enrolled in various VIP programs and charged $49.95 per month unless skipped. In many cases, consumers reportedly had no clue they were enrolled for these programs and unknowingly racked up monthly charges.
Although some settlement benefits are automatic, the deadline to file unresolved complaints with the settlement is Jan. 30, 2026.
$15M Solitaire Cash bot players class action settlement
Papaya Gaming agreed to pay $15 million to resolve claims that it misled players into thinking its solitaire games were skill-based.
The settlement benefits individuals who had a Papaya account and made a deposit in one or more Papaya apps, including Solitaire Cash, Bubble Cash, Bingo Cash, 21 Cash and Triple Match Cash, between Jan. 1, 2019, and Sept. 5, 2024.
According to plaintiffs in the case, Papaya intentionally misled consumers into thinking that their matches were skill-based and played against other real players. In reality, Papaya allegedly used bots in contests to deceive consumers.
The deadline to file a claim with the settlement is Jan. 30, 2026.
Toyota Bluetooth echo class action settlement
Toyota agreed to a class action lawsuit settlement to resolve claims that some of its vehicles were equipped with a faulty bluetooth system that caused an echo on phone calls.
The settlement benefits current and former owners and lessees of 2014-2019 4Runner, 2015-2018 Avalon, 2015-2018 Avalon HV, 2014-2019 Highlander, 2014-2019 Highlander HV, 2016-2018 Mirai, 2016-2019 Prius, 2017-2019 Prius Prime, 2015-2019 Prius V, 2014-2019 Sequoia, 2015-2017 Sienna, 2014-2019 Tacoma, 2014-2019 Tundra, 2015 Venza or 2018-2019 Yaris in certain states.
Certain Toyota vehicles allegedly suffered from a defect in their Bluetooth hands-free phone systems, which caused a noticeable echo on phone calls. Plaintiffs in the case argue that Toyota should have known about the defect and warned drivers.
No claim form is required to benefit from this settlement.
2025 Class Action Settlements
Here’s a list of past class action lawsuit settlements covered by The Penny Hoarder.
December 2025
- Infosys McCamish Systems data breach class action settlement: Infosys McCamish Systems agreed to pay $17.5 million to resolve claims that a 2023 data breach compromised the information of retirement and life insurance customers.
- PetSafe electronic collar class action settlement: PetSafe and its parent company agreed to a $1.9 million settlement to resolve claims that they misleadingly marketed electric dog collars as “harmless” when they could cause harm.
- EyeMed data breach class action settlement: EyeMed agreed to pay $5 million to resolve claims that it failed to protect consumer information from a 2020 data breach.
- Frozen waffle recall class action settlement: TreeHouse Foods agreed to pay $4 million to resolve claims that its recalled frozen waffles were contaminated with Listeria, posing a risk of serious illness to consumers.
- HelloFresh class action settlement over automatic renewals: HelloFresh agreed to pay $7.5 million to resolve claims that it renewed subscriptions without obtaining consent, resulting in surprise charges for consumers.
- Arhaus false advertising class action settlement: Arhaus agreed to pay $6 million to resolve claims that it advertised its furniture at misleading sale prices, allegedly deceiving consumers into purchasing.
- Landmark Admin data breach class action settlement affects customers of six insurance companies: Multiple insurance companies agreed to a $6 million settlement to resolve claims that they failed to prevent a 2024 Landmark Admin data breach, which compromised their clients’ information.
- Jaguar Land Rover defective turbocharger class action settlement: Jaguar Land Rover agreed to a class action lawsuit settlement to resolve claims that certain Land Rover and Range Rover vehicles were equipped with defective turbochargers.
- AARP Facebook privacy class action settlement: AARP agreed to a $12.5 million settlement to resolve claims that it shared user information with Facebook in violation of the federal Video Privacy Protection Act (VPPA).
- TransUnion FCRA class action settlement: TransUnion agreed to a $2.5 million settlement to resolve claims that it failed to delete certain information from its databases in violation of the Fair Credit Reporting Act (FCRA).
November 2025
- UnitedHealthcare of North Carolina – out-of-network reimbursements: UnitedHealthcare agreed to pay $3.4 million to settle claims it underpaid out-of-network medical service claims for some North Carolina members, allegedly forcing them to cover more costs than their policies required.
- InstaKeto / Ultra Fast Keto Boost / Instant Keto – weight-loss claims: Sellers of certain keto pills agreed to pay $200,000 to resolve allegations they deceptively marketed their products as highly effective weight-loss solutions without adequate support.
- Forbes – Facebook privacy (VPPA): Forbes agreed to pay $7.5 million to settle claims it used a Facebook tracking pixel that shared subscribers’ video-viewing data with Facebook without consent, allegedly violating the VPPA.
- Panera – 2024 data breach: Panera agreed to a $2.5 million settlement resolving claims a 2024 data breach exposed customers’ Social Security numbers and other sensitive data due to lax security.
- Keurig – K-Supreme coffee maker defects: Keurig agreed to pay $950,000 to settle allegations some K-Supreme coffee makers lost power during descaling and became unusable, and that Keurig did not adequately address the defect.
- HexClad – ‘toxic chemical-free’ cookware claims: HexClad agreed to a $2.5 million settlement resolving allegations it falsely advertised its cookware as free of toxic chemicals like PFAS and PFOA despite allegedly containing them.
- Canteen – vending machine overcharges: Canteen agreed to pay $6.94 million to settle claims it charged card-paying customers more than the posted vending machine prices without clear disclosure.
- AT&T – 2024 data breaches: AT&T agreed to a $177 million settlement resolving claims two 2024 data breaches compromised sensitive customer information, including Social Security numbers and billing data.
- Volkswagen / Audi – defective turbochargers: Volkswagen agreed to fund a settlement resolving claims turbochargers in certain Volkswagen and Audi vehicles corroded and failed prematurely, allegedly without adequate warranty relief.
- Kaiser Permanente – mental health reimbursement: Kaiser Permanente in California agreed to provide reimbursements to members who could not access in-network mental health or substance use care and paid out of pocket for out-of-network treatment after Jan. 1, 2021.
October 2025
- Capital One – 360 Savings interest rates: Capital One agreed to pay $425 million to settle claims it failed to raise interest rates on 360 Savings accounts while offering higher rates on 360 Performance Savings, allegedly without clear disclosure.
- Advance Auto Parts – 2024 data breach: Advance Auto Parts reached a settlement over a 2024 data breach that allegedly compromised personal information for current and former employees and job applicants.
- Neiman Marcus – 2024 data breach: Neiman Marcus agreed to pay $3.5 million to settle claims a May 2024 data breach exposed customers’ personal information due to insufficient cybersecurity protections.
- Whole Foods – 365 hot cocoa slack-fill: Whole Foods agreed to a $650,000 settlement resolving allegations its 365 Organic hot cocoa containers contained non-functional empty space that misled shoppers about the amount of product.
- Similasan – homeopathic eye drops labeling: Similasan will pay $3.575 million to settle claims it mislabeled homeopathic eye drops as sterile and failed to adequately disclose risks associated with silver sulfate in the products.
- Fashion Nova – website accessibility: Fashion Nova agreed to a $5.15 million settlement resolving claims its website was not fully usable with screen readers, allegedly denying blind customers equal access.
- Align Technology / SmileDirectClub – antitrust: Align Technology agreed to pay $31.75 million to settle allegations it entered an anticompetitive agreement with SmileDirectClub that suppressed competition in the direct-to-consumer aligner market.
- Zales – telemarketing texts (TCPA): Zales agreed to a $7.54 million settlement resolving allegations it sent marketing texts to consumers on the National Do Not Call Registry without proper consent.
- Frontier Communications – 2024 data breach: Frontier Communications agreed to pay $5.64 million to settle claims an April 2024 data breach exposed customers’ sensitive information, including Social Security numbers.
- Evolve Bank & Trust – 2024 data breach: Evolve Bank & Trust agreed to a $3.78 million settlement resolving allegations a 2024 cyberattack compromised consumers’ Social Security numbers and bank account information due to inadequate safeguards.
September 2025
- Truist Bank – prerecorded calls (TCPA): Truist Bank agreed to a $4.1 million settlement resolving claims it placed prerecorded calls about accounts to consumers who were not the intended recipients, allegedly without consent.
- Sysco – 2023 data breach: Sysco agreed to pay $2.3 million to settle allegations a May 2023 data breach exposed employees’ and others’ personal information, forcing them to take steps to protect against fraud.
- Albertsons / Safeway – text message marketing: Albertsons, Safeway and related chains agreed to a $5.95 million settlement over claims they sent unsolicited marketing texts and continued messaging some consumers after opt-out requests.
- Ann Taylor Factory / Loft Outlet – false discounts: Premium Brands OpCo reached a settlement resolving allegations Ann Taylor Factory and Loft Outlet stores used deceptive “sale” pricing that did not reflect genuine markdowns.
- FuboTV – VPPA privacy claims: FuboTV agreed to pay $3.4 million to settle claims it shared subscribers’ viewing data with third parties such as Facebook and Google without consent, allegedly violating the VPPA.
- Formula 1 – subscriber privacy: Formula 1 agreed to a $5.5 million settlement resolving claims it shared account and viewing information for users of its digital platforms with third parties without permission.
- Viki – Meta Pixel video tracking: Viki agreed to pay $8 million to settle allegations it used Meta Pixel to share users’ video-watching data with Facebook without the consent required by the VPPA.
- Poppi – ‘gut healthy’ soda claims: Poppi agreed to an $8.9 million settlement resolving claims it marketed its soda as “gut healthy” without scientific support, allegedly misleading health-focused consumers.
- Subaru – EyeSight driver-assist defects: Subaru reached a settlement resolving allegations EyeSight driver-assistance systems in certain vehicles have braking and lane-keeping defects that could pose safety risks.
- Ocwen Loan Servicing – fee markups: Ocwen agreed to a settlement resolving claims it charged borrowers undisclosed markups on broker price opinion and hybrid valuation fees, allegedly inflating servicing costs.
August 2025
- Volkswagen – Atlas seat latch defect: Volkswagen agreed to a settlement resolving claims 2018–2024 Atlas vehicles have defective second-row seat latches that can come unlatched while driving, allegedly creating a safety risk.
- QuoteWizard – telemarketing texts (TCPA): QuoteWizard agreed to pay $19 million to settle allegations it sent repeated unsolicited insurance marketing texts to people on the National Do Not Call Registry without consent.
- TMX Finance – TitleMax/InstaLoan/TitleBucks data breach: TMX Finance agreed to a $6.5 million settlement resolving claims a 2023 cyberattack exposed customers’ Social Security numbers and financial account details.
- TracFone Wireless – 2021 data breach: TracFone Wireless reached a settlement over allegations a December 2021 breach compromised customer data that should have been protected with stronger cybersecurity measures.
- GM – excessive oil consumption: GM agreed to pay $150 million to resolve claims some Chevrolet and GMC vehicles had engine defects that caused excessive oil consumption, allegedly leading to performance problems and repair costs.
- GameStop – Facebook privacy (VPPA): GameStop agreed to a $4.5 million settlement after allegations it shared online customers’ video game purchase information with Facebook via tracking pixels without consent, allegedly violating the VPPA.
- GM – defective shifter ‘shift to park’: GM reached a settlement resolving claims certain Chevrolet and GMC vehicles had defective shifters that triggered “shift to park” errors and made it difficult to shut off the car.
- The Criterion Collection – subscriber data sharing: The Criterion Collection agreed to pay $4.5 million to settle allegations it shared streaming subscribers’ viewing data with Meta, Twilio and others without proper consent, allegedly violating privacy laws.
- Gerber – allergy risk formula claims: Gerber agreed to a multi-million dollar settlement resolving claims it falsely advertised Good Start Gentle formula as reducing allergy risk without sufficient scientific support.
- Torrid – deceptive online discounts: Torrid agreed to pay $10 million to settle allegations it advertised misleading discounts on its website, allegedly inflating “original” prices to make sales appear more attractive.
July 2025
- Apple – Siri recordings: Apple agreed to pay $95 million to resolve claims Siri-enabled devices sometimes recorded private conversations accidentally and shared them with Apple or third parties without users’ consent.
- Coldwell Banker – robocalls (TCPA): Coldwell Banker agreed to pay $20 million to settle allegations it bombarded consumers on the National Do Not Call Registry with unsolicited robocalls promoting real estate services.
- Mondelez – Wheat Thins ‘100% whole grain’: Mondelez agreed to a $10 million settlement resolving claims Wheat Thins crackers labeled “100% whole grain” actually contained refined grains, allegedly misleading health-conscious consumers.
- Rite Aid – 2024 data breach: Rite Aid agreed to pay $6.8 million to settle allegations a June 2024 data breach exposed customers’ names, contact details and driver’s license information due to inadequate security.
- 23andMe – 2023 data breach: 23andMe agreed to a settlement resolving claims a 2023 data breach compromised sensitive genetic and health-related customer data that the company allegedly failed to safeguard properly.
- Google – AdWords geo-targeting: Google agreed to pay $100 million to settle claims it charged advertisers for ad clicks outside of their specified geographic targets, allegedly breaching AdWords agreements.
- GM – truck fuel pump defect: GM agreed to a $35 million settlement resolving allegations certain Chevrolet Silverado and GMC Sierra diesel trucks had defective fuel pumps that shed metal shavings and caused engine failure.
- SeaWorld – annual pass auto-renewal: SeaWorld agreed to pay $1.5 million to settle claims it failed to clearly disclose automatic renewal terms for San Diego annual passes, leading to surprise renewal charges for some Californians.
- Raw chicken processors – price-fixing: Several chicken producers agreed to a $22.5 million settlement, adding to a larger pool, over allegations they conspired to raise prices on raw chicken products in violation of antitrust laws.
- Momentum Solar – telemarketing calls: Momentum Solar agreed to pay $30 million to resolve allegations it repeatedly called non-customers with unsolicited telemarketing calls in violation of the TCPA.
June 2025
- MGM Resorts – 2019 & 2023 data breaches: MGM Resorts International agreed to pay $45 million to settle claims two data breaches in 2019 and 2023 exposed guests’ sensitive information, including IDs and Social Security numbers.
- Botanic Tonics – Feel Free Wellness Tonic: Botanic Tonics agreed to pay $8.75 million to resolve allegations its Feel Free Wellness Tonic contains kratom and other ingredients that can pose health risks not adequately disclosed to consumers.
- Avast – FTC data privacy case: Avast agreed to a $16.5 million FTC settlement over claims it collected and sold users’ browsing data to third parties despite promising to protect their privacy in its antivirus products.
- HP – misleading online discounts: HP agreed to pay $4 million to settle allegations it advertised misleading discounts on its website, allegedly creating fake “original” prices to make sales appear more attractive.
- HALO Innovations – BassiNest tilt defect: HALO Innovations agreed to a $1.5 million settlement over claims certain BassiNest bassinets could tilt and create unsafe sleep conditions for infants, increasing the risk of rolling or airway obstruction.
- Whirlpool / KitchenAid / Maytag – refrigerator frost defect: A settlement compensated buyers of certain Whirlpool, KitchenAid and Maytag refrigerators that allegedly suffer from excessive frost buildup on evaporators, causing the units not to cool properly.
- Retina Group of Washington – 2023 data breach: Retina Group of Washington agreed to pay $3.6 million to resolve claims a March 2023 data breach exposed patients’ Social Security numbers and insurance information due to weak cybersecurity.
- UnitedHealth – Optum robocalls (TCPA): UnitedHealth agreed to a $1.8 million settlement resolving claims Optum Community Health Workers placed robocalls to promote home care services to non-members and others without proper consent.
- Sierra-at-Tahoe – ski ticket parking restrictions: Sierra-at-Tahoe reached a settlement over allegations some customers could not use their pre-purchased single-day lift tickets because undisclosed parking restrictions prevented access on those dates.
- DSW – TCPA text messages: DSW agreed to pay about $4.42 million to settle claims it continued sending marketing texts to consumers after they opted out, allegedly violating the TCPA.
May 2025
- iFit / NordicTrack / ProForm – touchscreen failures: iFit agreed to a settlement resolving claims a mandatory software update caused touchscreens on certain NordicTrack and ProForm fitness machines to fail, limiting use of the equipment.
- Real estate broker commissions – antitrust: More than $730 million in real estate broker commission settlements was available to home sellers who allegedly paid inflated broker fees due to industry-wide anticompetitive practices.
- Olaplex – ‘Made in USA’ claims: Olaplex agreed to a settlement resolving allegations it falsely advertised some haircare products as “Made in the USA” even though they contained foreign-produced ingredients, allegedly misleading patriotic purchasers.
- Robitussin / Haleon – ‘non-drowsy’ labeling: Haleon agreed to pay $4.5 million to settle claims certain Robitussin cold medicines were marketed as “non-drowsy” despite containing dextromethorphan, which allegedly can cause drowsiness.
- Boar’s Head – listeria contamination: Boar’s Head Provisions Co. agreed to pay $3.1 million to resolve claims consumers bought deli meats later recalled for potential listeria contamination, allegedly exposing them to serious health risks.
- Synta – telescope price-fixing: Synta Technology agreed to pay $32 million to settle allegations it conspired with other manufacturers to raise and fix telescope prices, allegedly violating antitrust laws and inflating costs for buyers.
- Ring – Protect Plan subscription disclosure: Ring reached a settlement resolving claims it failed to clearly disclose that some Ring devices required a paid Protect Plan subscription to access full recording and playback features.
- National Student Clearinghouse – MOVEit data breach: National Student Clearinghouse agreed to a $9.95 million settlement after the 2023 MOVEit data breach allegedly exposed individuals’ Social Security numbers and other data obtained through its clients.
- loanDepot – 2024 data breach: loanDepot agreed to pay $25 million to resolve claims a January 2024 cyberattack compromised sensitive information for roughly 16.9 million customers, allegedly due to inadequate safeguards.
- Mylan Pharmaceuticals – EpiPen monopoly: Mylan Pharmaceuticals agreed to a $73.5 million settlement resolving allegations it conspired to delay generic EpiPen competition and keep prices artificially high, harming insurers and consumers.
April 2025
- USAA – 2021 data breach: USAA agreed to a $3.25 million settlement resolving allegations a May 2021 data breach compromised customers’ personal information because the company failed to take reasonable steps to protect it.
- Everything Breaks – robocalls (TCPA): Everything Breaks agreed to pay $995,000 to settle claims it made repeated unsolicited telemarketing robocalls to consumers on the National Do Not Call Registry in violation of the Telephone Consumer Protection Act.
- Apple – Apple Watch battery swelling: Apple agreed to a $20 million settlement over allegations certain Apple Watch models had batteries prone to swelling, which could damage components and require expensive repairs.
- Wells Fargo – call recording (CIPA): Wells Fargo agreed to pay $19.5 million to settle claims it recorded calls to California businesses without consent, allegedly violating the California Invasion of Privacy Act’s two-party consent rules.
- Beyond Meat – protein and quality claims: Beyond Meat agreed to a $7.5 million settlement resolving allegations it overstated protein content and ingredient quality for some products, allegedly misleading consumers into paying premium prices.
- UnitedHealthcare – unsolicited robocalls: UnitedHealthcare agreed to pay $2.5 million to settle claims it placed non-emergency robocalls to people who were not members or authorized contacts, allegedly in violation of the TCPA.
- Walgreens – Prescription Savings Club pricing: Walgreens agreed to a $100 million settlement resolving allegations it inflated prescription drug prices and failed to account for Prescription Savings Club discounts, allegedly overcharging insurers and consumers.
- Stanley Steemer – 2023 data breach: Stanley Steemer agreed to pay $700,000 to settle claims a February 2023 data breach exposed customers’ and employees’ personal information, including Social Security numbers, due to lax data security.
- Fisher-Price – Rock ’n Play sleeper safety: Fisher-Price agreed to a $19 million settlement over allegations its Rock ’n Play Sleeper was unsafe for infants and linked to injuries and deaths, leading to a large recall.
- Horizon – treadmill horsepower claims: Horizon agreed to pay $600,000 to resolve claims it falsely advertised certain treadmills as having higher continuous horsepower than they actually delivered, allegedly misleading buyers about performance.
March 2025
- Smitty’s Supply / CAM2 – tractor hydraulic fluid: Smitty’s Supply and Cam2 International agreed to pay $31.9 million to resolve claims their 303 tractor hydraulic fluids failed to meet industry specifications and allegedly damaged farm equipment.
- United Dominion Realty – late fees: United Dominion Realty agreed to pay $3 million to settle allegations it charged California tenants unlawful late fees as high as $100 in violation of state law.
- loanDepot – unauthorized debits (EFTA): loanDepot agreed to a $1.025 million settlement resolving claims it debited borrowers’ bank accounts on a recurring basis without providing the written authorization required under the Electronic Funds Transfer Act.
- APi – unpaid overtime at Shell Cracker Plant: APi agreed to pay $1.05 million to settle allegations it failed to pay Pennsylvania workers overtime for mandatory pre- and post-shift tasks at the Shell Cracker Plant, allegedly violating state wage laws.
- Konnektive / La Pura – ‘natural and pure’ cosmetics: Konnektive agreed to a $5 million settlement after consumers alleged La Pura cosmetics were falsely advertised as natural and pure despite containing synthetic ingredients such as parabens and sulfates.
- Mercer University – 2023 data breach: Mercer University reached a settlement over a February 2023 data breach that allegedly exposed students’ and faculty members’ Social Security numbers and other personal data due to inadequate security.
- St. Stephen’s Cemetery – burial record errors: St. Stephen’s Cemetery agreed to a $1.25 million settlement resolving claims it lost burial records and buried bodies in the wrong plots, allegedly violating Kentucky law and consumer expectations.
- DC Health Benefit Exchange Authority – 2023 data breach: The District of Columbia Health Benefit Exchange Authority agreed to pay $1.45 million to resolve claims a 2023 data breach exposed Social Security numbers and contact information of approximately 170,000 individuals.
- Fandango – ticket fee disclosures: Fandango agreed to a $9 million settlement after allegations it failed to clearly disclose convenience fees on movie ticket purchases in New York, allegedly causing consumers to overpay.
- Streamlabs – Pro auto-renewal subscriptions: Streamlabs agreed to pay $4.4 million to settle claims consumers were enrolled in Streamlabs Pro automatic subscriptions after adding effects to donations, even though they believed they were making a one-time purchase.
February 2025
- Vi – senior living data breach: Vi, a luxury senior living community operator, agreed to a settlement over a 2023 data breach that allegedly exposed residents’ Social Security numbers, payment details and health information due to insufficient cybersecurity.
- System1 – automatic-renewal subscriptions: System1 agreed to pay $2.5 million to resolve claims it enrolled Californians in automatic-renewal or continuous service software subscriptions without clear, affirmative consent or prominent disclosure of renewal terms.
- Meridian Heights Apartments – habitability issues: Meridian Heights agreed to a $2.2 million settlement after tenants alleged Washington, D.C., apartments were uninhabitable due to mold, vermin and other serious defects that violated housing codes and lease obligations.
- Morrison Community Hospital – 2023 data breach: Morrison Community Hospital agreed to pay $675,000 to settle allegations a September 2023 cyber incident exposed patient information, including Social Security numbers and health data, because it lacked adequate security controls.
- Mondelēz / Bryan Cave Leighton Paisner – data breach exposure: Mondelēz International and law firm Bryan Cave Leighton Paisner agreed to a $750,000 settlement after a 2023 data breach at the firm allegedly compromised clients’ sensitive personal, employment and health information.
- Nonstop Administration and Insurance Services – 2022 data breach: Nonstop Administration and Insurance Services agreed to fund a $1.6 million settlement to resolve claims a 2022 data breach exposed employee and plan-participant data, allegedly due to negligent cybersecurity practices.
- Professional Finance Company – 2022 data breach: Professional Finance Company agreed to a $2.5 million settlement after a 2022 data breach allegedly exposed consumers’ sensitive information, including Social Security numbers, that plaintiffs say could have been safeguarded with better security.
- Rise Interactive / Edgepark Medical – marketing data breach: Rise Interactive reached a settlement over a 2022 cyberattack tied to marketing services for Edgepark Medical Supplies that allegedly exposed names, medical details and insurance data of affected consumers.
- Progressive – call center vendor security incident: Progressive agreed to pay $3.25 million to resolve claims a long-term security incident at a third-party call center vendor may have compromised policyholders’ personal and financial information that should have been better protected.
- GM & LG Electronics – Chevy Bolt battery defect: General Motors and LG Electronics agreed to a $150 million settlement resolving allegations that 2017–2022 Chevrolet Bolt EVs had defective batteries that increased fire risk and required costly repairs.
January 2025
- Patreon – VPPA privacy: Patreon agreed to pay $7.25 million to resolve claims it used tracking tools that shared users’ video-viewing activity with Facebook without consent, allegedly violating the Video Privacy Protection Act.
- Charlotte Tilbury – biometric data collection: Charlotte Tilbury agreed to pay $2.925 million to settle allegations that its virtual try-on and beauty tools collected Illinois consumers’ facial geometry without the written disclosures and consent required under the state’s Biometric Information Privacy Act.
- Luxottica – 2020 data breach: Luxottica agreed to a $250,000 settlement over a 2020 data breach that allegedly exposed Social Security numbers, financial data, health information and other sensitive customer details due to inadequate cybersecurity.
- PRGX Global – 2022 data breach: PRGX Global Inc. agreed to pay $675,000 to resolve claims it failed to protect personal information compromised in an April 2022 data breach, allegedly because it did not maintain reasonable security safeguards.
- Vitol / SK Energy / SK Trading – California gasoline resident settlement: Vitol, SK Energy Americas and SK Trading International agreed to a $50 million settlement with the California attorney general over allegations they conspired to fix gasoline prices in several counties in 2015, inflating fuel costs for residents.
- Vitol / SK Energy / SK Trading – California gasoline nonresident settlement: A separate $50 million settlement covers certain nonresidents who bought gasoline in California between 2015 and 2017, resolving similar allegations that the companies engaged in an unlawful price-fixing scheme.
- Reynolds & Reynolds / CDK Global – dealer management systems pricing: Reynolds and Reynolds and CDK Global agreed to a $129.5 million settlement resolving claims they conspired to limit competition and raise prices for dealer management systems sold to auto dealerships.
- Wells Fargo – COVID mortgage forbearance: Wells Fargo agreed to pay $185 million to settle allegations it placed some mortgages into COVID-19 forbearance without borrowers’ informed consent, allegedly causing credit issues and other financial harm.
- Visa & Mastercard – ATM fee antitrust claims: Visa and Mastercard agreed to pay $197.5 million to resolve lawsuits alleging their ATM network rules enabled banks to charge inflated access fees on cash withdrawals, in violation of antitrust laws.
- Intervet / HomeAgain – pet microchip memberships: Intervet, maker of HomeAgain, reached a settlement resolving claims it misled pet owners into believing they had to buy premium HomeAgain memberships to keep their pets’ microchips active in the recovery database.










