Featured Settlements

Judge Godbey, a Texas federal judge, gave his final approval in a class action settlement against Zywave Inc., and its subsidiary Insurance Technologies Corporation (“ITC”), an insurance software provider. This settlement is based off a data breach that occurred in 2021, which affected more than 4 million customers. Cybercriminals easily accessed Zywave’s computer network and comprised the names, addresses, dates of birth, login credentials, and other personal information of customers of insurance brokers. Those brokers were customers of Zywave and ITC.

Judge Gutierrez of the US District Court for the Central District of California gave his final approval in a class action settlement against Bosley Inc. (“Bosley”), a hair-restoration clinic. The hair clinic must pay $500,000 to settle a class action lawsuit against them stemming from an August 2020 ransomware attack. Cybercriminals were able to steal Personally Identifiable Information (“PII”) of more than 100,000 people and hold it for ransom. Cybercriminals could easily gain access to Bosley’s computer systems due to the lack of adequate data security the hair clinic had. Some of the PII exfiltrated out of Bosley’s systems were Social Security numbers, financial account and payment-card numbers, and driver’s license numbers of Plaintiffs and class members.

U.S. District Judge Amy Berman Jackson preliminarily approved the settlement between the OPM, contractor Peraton Risk Decision Inc., and a class of current, former and prospective government workers who can show they spent money, or time, responding to the data theft.