Green Bay Packers Data Breach Lawsuit: Were Customers’ Private Details Left Unprotected?

Case Overview: A class action lawsuit claims the Green Bay Packers failed to protect customer data, leading to a data breach that exposed personal and financial information.

Consumers Affected: Packers Pro Shop customers whose personal and financial information was compromised in the data breach.

Court: State of Wisconsin Circuit Court, Brown County

An alleged failure to secure sensitive customer information at the Green Bay Packers Pro Shop has led to a class action complaint filed in Wisconsin state court. The complaint stems from a data breach that exposed thousands of customers’ private details during a two-month period in 2024.

Packers Pro Shop Data Breach Exposed Customer Information

Brian Garcia, a resident of San Marcos, Texas, filed the complaint on February 7, 2025, in Brown County Circuit Court. Representing himself and others impacted, Garcia claims the Green Bay Packers failed to properly secure private information collected through the team’s online retail platform, the Packers Pro Shop website.

The complaint alleges that hackers inserted malicious code into the website’s checkout system, enabling unauthorized access to sensitive customer data, including names, mailing addresses, email addresses, and credit card details. Garcia claims the Packers lacked proper safeguards to detect the intrusion sooner and failed to adequately protect customers’ personal information.

Complaint Claims Packers Failed to Secure Private Data

According to the complaint, the Packers first detected malicious code on the Pro Shop website on October 23, 2024. An investigation revealed that the code may have been active between September 23 and September 24, 2024, and again between October 2 and October 23, 2024. During those windows, customers who completed purchases with credit cards may have had their payment information compromised.

The Packers publicly acknowledged the incident on January 7, 2025, stating that only credit card purchases were affected. Customers using gift cards, Pro Shop website accounts, PayPal, or Amazon Pay were not impacted, according to the team’s announcement.

The complaint alleges that despite discovering the breach in late October, the Packers waited over two months before notifying customers. Formal notices began arriving via mail and email in January 2025, leaving many unaware that their information had been compromised for an extended period.

Customers Say Packers Provided Incomplete Details About the Breach

Garcia’s complaint states that the Packers failed to provide affected customers with enough information to understand how the breach occurred or the specific steps taken to address the security lapse. Without full transparency, Garcia argues, customers cannot determine whether the team has taken proper corrective measures to prevent future incidents.

The complaint also alleges that the Packers failed to implement proper security protocols before the breach occurred, despite collecting and storing highly sensitive payment data. Garcia contends the organization had a duty to deploy robust safeguards, given the sensitive nature of the information collected through the Pro Shop’s online checkout system.

“Defendant failed to properly secure and safeguard Private Information that was entrusted to it,” the complaint states. Garcia and others affected claim they placed trust in the Packers Pro Shop website to responsibly handle personal and financial data, but that trust was broken when hackers gained access.

Breach Impacts Thousands of Customers

In January 2025, the Wisconsin Department of Agriculture, Trade and Consumer Protection confirmed that approximately 8,514 customers were affected by the breach. The impacted individuals span multiple states, as the Packers Pro Shop serves both local fans and out-of-state customers who order team merchandise online.

Consumer data protection remains a growing concern, with several well-known companies facing similar legal complaints. In February, a complaint filed against Circle K alleged that the company failed to properly safeguard employee data, leaving sensitive personal information exposed in a separate breach.

Earlier this year, H&R Block was also accused of failing to protect customer data after a third-party software integrated into its platform allegedly allowed unauthorized parties to collect personal and financial information without customer consent.

In the Green Bay Packers Pro Shop data breach class action lawsuit, Garcia seeks to represent all individuals in the United States whose data was compromised as a result of the breach. He is suing for monetary damages and restitution for losses tied to the data breach. The complaint also requests injunctive relief to ensure future customers receive stronger protections when shopping through the Packers Pro Shop website.

Case Details:

• Lawsuit: Brian Garcia v. Green Bay Packers, Inc.
• Case Number: 2025CV000212
• Court: State of Wisconsin Circuit Court, Brown County

Plaintiffs' Attorneys:

• Samuel J. Strauss (Strauss Borrelli PLLC)
• Mark Svensson and Colin Brown (Levi & Korsinsky, LLP) 

Were you affected by the Green Bay Packers Pro Shop data breach? Share your experience in the comments below.