Multiple recent data breaches and privacy violations have sparked new class action lawsuits and settlements. HopSkipDrive reached a $1.99 million settlement over a data breach, while xAI faces allegations that its Grok AI created non-consensual deepfake images. Meanwhile, Substack disclosed a breach affecting over 663,000 accounts.

Recent Data Privacy Cases: Settlement Approved, AI Lawsuit Filed, and Massive Breach Disclosed

Several significant data privacy developments emerged in recent weeks, highlighting ongoing concerns about how companies handle personal information. From a multi-million dollar settlement to allegations involving AI-generated content, here are the key cases consumers should know about.

1. HopSkipDrive Data Breach Settlement

Status: $1.985 million settlement approved

Who Qualifies: Users whose information was exposed in the breach

What's Available: Cash payments and credit monitoring

According to a recent settlement announcement, HopSkipDrive has agreed to pay $1.985 million to resolve claims stemming from a data breach that allegedly exposed sensitive personal and medical information. The rideshare service for children faced a class action lawsuit after the security incident.

The lawsuit alleged that HopSkipDrive failed to adequately protect user data, leading to unauthorized access to personal information. Class members who can demonstrate they were affected by the breach may be eligible for cash compensation, while all class members could receive credit monitoring services.

How to claim: Details about the claims process are expected to be released following final court approval.

2. xAI Grok AI Deepfake Allegations

Status: New lawsuit filed

Allegations: Non-consensual deepfake image creation

Defendant: xAI and Elon Musk

A new class action lawsuit accuses xAI's artificial intelligence chatbot Grok of sexually exploiting women and girls by allegedly creating non-consensual deepfake images. The lawsuit claims the AI system generated sexually explicit images of individuals without their permission or knowledge.

The complaint alleges that Grok's AI technology was used to create realistic but fabricated sexual images, violating privacy rights and potentially causing significant emotional distress. The lawsuit seeks damages for the alleged violations and aims to prevent the continued creation of such content.

Current status: The case is in early stages, with xAI expected to respond to the allegations in court filings.

3. Substack Data Breach Disclosure

Status: Breach disclosed, no lawsuit yet filed

Scope: 663,121 user accounts affected

Data Exposed: Email addresses, profile information, some phone numbers

Substack, the newsletter publishing platform, disclosed that it suffered a data breach in October 2025 that became more widely circulated in February 2026. The incident allegedly exposed information from over 663,000 user accounts.

According to reports, the breach included email addresses and publicly visible profile information such as publication names and user biographies. A subset of the affected records also contained phone numbers. The company has not yet faced class action litigation over the incident, though such lawsuits often follow major data breach disclosures.

What users should do: Substack users may want to monitor their accounts for suspicious activity and consider changing passwords as a precautionary measure.

Key Takeaways

• Settlement timing varies — HopSkipDrive's case moved relatively quickly to resolution, while other cases may take years to reach settlement
• AI privacy issues emerging — The xAI lawsuit represents a new frontier in privacy litigation involving artificial intelligence technology
• Breach scope matters — Larger breaches like Substack's often attract more legal attention and potentially higher settlement values

Data privacy cases continue to evolve as technology advances and state laws expand consumer protections. Companies face increasing pressure to secure user information and provide adequate remedies when breaches occur.

Have you been affected by any of these data privacy incidents? Understanding your rights can help you make informed decisions about potential legal remedies.