Data Breach Settlements, New Lawsuits, and a Shifting TCPA Landscape: March 2026 Roundup

Case Overview

| | |

|---|---|

| Article Type | Roundup |

| Vertical | Privacy, Data & TCPA |

| Cases Covered | 5 |

| Date Published | March 2026 |

Data Breach Settlements & New Lawsuits March 2026 Roundup

New lawsuits target Angi Inc. and Choice Hotels as Cadence Bank opens a $5.25M MOVEit settlement. See key privacy and TCPA developments from March 2026.

Data Breach Settlements, New Lawsuits, and a Shifting TCPA Landscape: March 2026 Roundup

Several notable data privacy and TCPA developments emerged this week, including an open settlement for Cadence Bank customers affected by a MOVEit breach, a new claim opportunity for Christian Dior shoppers, and fresh lawsuits targeting Angi Inc. and Choice Hotels. A significant court trend in the Eleventh Circuit is also reshaping how text message claims can be litigated under federal law.

Here's what you need to know about each development.


1. Cadence Bank MOVEit Data Breach Settlement — $5.25 Million

Settlement Amount: $5.25 million

Status: Open — claim deadline TBD

Who May Qualify: Individuals affected by the Cadence Bank data breach linked to the MOVEit file transfer software vulnerability

Cadence Bank has agreed to a $5.25 million class action settlement resolving allegations that a data breach compromised customers' personal information. According to a recent class action settlement filing, the breach stemmed from a vulnerability in MOVEit, a widely used file transfer program that was exploited in a wave of cyberattacks affecting organizations across multiple industries in 2023.

The lawsuit alleged that Cadence Bank failed to adequately protect sensitive customer data and did not act swiftly enough to mitigate the harm caused by the breach. The settlement does not constitute an admission of wrongdoing by the bank.

Individuals who received notification that their information was involved in the breach may be eligible for a cash payment from the settlement fund. The exact amount each claimant could receive will depend on the number of valid claims submitted and documented losses.

How to claim: Visit the official settlement administrator's website for claim instructions. Check your mail or email for a class notice, which may include a unique claim ID.


2. Christian Dior Data Breach Settlement

Settlement Amount: Not publicly specified

Status: Open

Who May Qualify: Individuals who received a notice about the 2025 Christian Dior data breach

Christian Dior is facing a class action settlement following a 2025 data breach that allegedly exposed the personal information of customers. According to the lawsuit, affected individuals whose data was compromised may be eligible for benefits under the terms of the settlement.

Luxury brand data breaches are notable in part because the customer information involved can include high-value personal and financial data. The specific types of data exposed in the Dior breach, and the full scope of how many individuals were affected, had not been fully detailed in publicly available filings as of this writing.

Those who received a breach notification letter from Christian Dior should review the settlement terms carefully, as eligibility and available benefits are typically tied to the class definition outlined in the notice.

How to claim: Review your breach notification letter for claim instructions or visit the settlement administrator's website for details.


3. Angi Inc. TCPA Class Action — Alleged Spam Calls and Texts

Status: Newly filed lawsuit

Who May Be Affected: Consumers who received unsolicited calls or texts from Angi Inc. while registered on the National Do Not Call Registry

A new class action lawsuit filed against Angi Inc. — the home services platform formerly known as Angie's List — alleges the company placed unwanted calls and sent text messages to consumers without their consent, in violation of the Telephone Consumer Protection Act (TCPA).

According to the complaint, the plaintiffs were listed on the National Do Not Call Registry at the time they allegedly received communications from Angi. The TCPA generally prohibits companies from placing telemarketing calls or sending promotional text messages to numbers registered on the Do Not Call list without prior express written consent. Statutory damages under the TCPA can reach $500 per violation and up to $1,500 per willful violation.

Angi has not yet publicly responded to the lawsuit's allegations, and no settlement has been reached at this stage.

Case status: Early litigation — no settlement or deadline yet.


4. Choice Hotels Data Breach Class Action

Status: Newly filed lawsuit

Who May Be Affected: Choice Hotels franchisees and franchise applicants whose personal information may have been compromised

A new class action lawsuit accuses Choice Hotels International Inc. of failing to adequately protect the personally identifiable information (PII) of its franchisees and franchise applicants. According to the complaint, the company's alleged negligence in safeguarding this data left sensitive information vulnerable to unauthorized access.

The lawsuit claims that Choice Hotels did not implement reasonable or industry-standard security measures to protect the data in its possession. The plaintiffs allege they now face an elevated risk of identity theft and fraud as a result of the alleged breach.

Choice Hotels has not yet publicly responded to the allegations. The case is in its early stages, and no settlement has been announced.

Case status: Early litigation — no settlement or deadline yet.


5. Eleventh Circuit Courts Narrow TCPA Text Message Claims Under Do-Not-Call Provisions

Status: Ongoing legal development — not a settlement

Who May Be Affected: Consumers with pending or potential TCPA Do Not Call claims involving text messages in Alabama, Florida, and Georgia

A significant legal trend is emerging in the Eleventh Circuit — the federal appellate jurisdiction covering Alabama, Florida, and Georgia — that could affect consumers' ability to bring private lawsuits over unwanted text messages under a specific provision of the TCPA.

Multiple district court judges in the Eleventh Circuit have recently dismissed TCPA claims filed under 47 U.S.C. § 227(c)(5), the statute's Do Not Call provision, holding that the law's reference to "telephone calls" does not extend to text messages. If this interpretation continues to gain traction or is adopted by the Eleventh Circuit Court of Appeals, it could significantly limit the legal remedies available to consumers who receive unsolicited promotional texts while registered on the Do Not Call list — at least within those three states.

This development underscores the evolving nature of TCPA litigation and the importance of understanding which legal theories apply to a given type of communication. Consumers in other circuits may not face the same limitation, as courts elsewhere have reached different conclusions on this question.

What this means: Individuals considering TCPA claims related to text messages in the Eleventh Circuit should be aware that the legal landscape is in flux. Only a licensed attorney can evaluate whether a particular claim is viable given current case law.


Key Takeaways

  • Two active settlements are currently open for Cadence Bank and Christian Dior customers — if you received a breach notification, review your eligibility sooner rather than later, as claim deadlines can pass quickly.
  • Data breach claims often don't require extensive documentation for base-level settlement benefits, though documented out-of-pocket losses typically unlock higher payment tiers.
  • TCPA litigation is evolving rapidly — a federal court trend in the Eleventh Circuit is narrowing text message claims under the Do Not Call provisions, which could affect the outcome of both new and existing lawsuits in that region.
  • Check your mail and email — class action notices are frequently sent by mail or email, and many eligible individuals never file because they miss or discard the notice.
  • New lawsuits against Angi and Choice Hotels are in early stages — no settlements or deadlines have been announced, but affected individuals should monitor developments.

Are you following any of these cases or have you filed a claim from a recent data breach settlement? Share your experience in the comments below.

InjuryClaims.com reports on litigation developments for informational purposes only. Nothing in this article constitutes legal advice. Eligibility for any settlement or lawsuit is determined by attorneys and courts, not by this publication.

Latest News

Loading...

Illustration of a mobile device getting an email notification