New York Consumer Law Blog

Uber will pay $148 million to settle a nationwide investigation into a 2016 data breach, in which a hacker managed to gain access to information belonging to 57 million riders and drivers. The breach included names and driver’s license numbers for 600,000 drivers.

The investigation, led by state attorneys general across the United States, focused on whether Uber had violated data breach notification laws by not informing consumers that their information had been compromised.
Read more . . .

Stanford University is facing a new Fair Credit Reporting Act class action with, potentially, over a thousand class members. And it’s not the first time Stanford has faced these claims.  Notably, this isn’t the first time that Stanford has faced FCRA claims for the disclosures in their application forms. In 2015, Stanford faced precisely the same claims from another employee. Read more . . .

Yahoo must pay $85 million and provide free credit monitoring to 200 million people as part of a settlement of what is believed to be the biggest data breach ever.

The onetime internet giant, which is now owned by Verizon, has reached a settlement in a class-action lawsuit over the 2013 and 2014 hacks. The company did not disclose the breach, which affected about 1 billion accounts, until 2016. The hacks exposed user names, email addresses, phone numbers, birthdates, scrambled passwords and security questions and answers.

Read more . . .