Subscribe To Our Newsletter

This field is for validation purposes and should be left unchanged.

List Of Open Cases & Investigations

This is Class Action U’s list of open data breach investigations and mass arbitration claims.

The Class Action U case list is updated regularly as new breaches are reported and new claims open, so be sure to check back often.

All Data Breaches

Date of Breach: Report submitted to HHS on October 9, 2026; incident date not disclosed

Not publicly disclosed; the HHS listing names no data types

Date of Breach: Reported by a threat actor in November 2026; not confirmed by the company

Not disclosed; categories of data involved have not been confirmed

Date of Breach: Reported by a threat actor in November 2026; not confirmed by the company

Claimed: loyalty program records, traveler profiles, account records with password-like tokens, booking records (unconfirmed)

Date of Breach: Reported by a threat actor in November 2026; not confirmed by the company

Claimed: shopper activity logs with IP addresses, chat transcripts with phone numbers, employee directory, a small number of Social Security numbers with dates of birth (unconfirmed)

Date of Breach: Reported by a threat actor in November 2026; not confirmed by the company

Not disclosed; categories of data involved have not been confirmed

Date of Breach: April 5, 2026

Not disclosed in the Indiana Attorney General filing (see your own notice letter for the items that apply to you)

Date of Breach: April 8, 2026 to June 8, 2026

Varies by provider: reported items include names, dates of birth, Social Security numbers, medical information and health insurance information (see your own notice letter for the items that apply to you)

Date of Breach: September 10, 2026

Not listed in the publicly posted notice letter (see your own notice letter for the items that apply to you)

Mass Arbitrations

All Open Claims

Safelite may have shared your personal information without your consent

Harbor Freight may have shared your personal information without your consent

Credit Genie may have charged interest rates that exceed state usury caps through its cash advance product

Gametime may have shared your personal information without your consent

Lids may have shared your personal information without your consent

Glo Digital may have shared your personal information without your consent

World Wrestling Entertainment may have used tracking technology to collect your information without consent.

Public Storage may have used tracking technology to collect your information without consent

Purple may have used tracking technology to collect your information without consent