CCPA Breach Class Action Settlement About To Get "Minted"

Although the California Consumer Privacy Act ("CCPA") went into effect on January 1, 2020 and over 100 class actions referencing the CCPA have been filed to date, very few class actions have actually made their way to court approval. That is about to change.

Last week, Judge Chhabria of the Northern District of California granted preliminary approval in a data breach class action involving 4.1 million potential class members, styled as Atkinson et al v. Minted, Inc., Case No. 3:20-cv-03869 (N.D. Cal.). The $5 million non-reversionary settlement fund will be paid to consumers whose personal information was exfiltrated by a hacking group known as ShinyHunters, as reported here. In or around May 2020, ShinyHunters reportedly exfiltrated the consumer information from San Francisco-based Minted, Inc. ("Minted") (along with 11 other companies) and then tried to sell that personal identifying information ("PII") on the dark web. In total, approximately 73 million