San Francisco 49ers Settle Data Breach Class Action Lawsuit

Case Overview: The San Francisco 49ers have reached a $610,000 settlement in a class action lawsuit over a 2022 data breach that exposed the personal information of more than 20,000 individuals.

Consumers Affected: Customers and employees whose personal information was compromised in the data breach.

Court: U.S. District Court for the Northern District of California, San Jose Division

The San Francisco 49ers have reached a settlement agreement to resolve class action lawsuits arising from a February 2022 data breach that compromised the personal information of more than 20,000 individuals. 

Pending court approval, the $610,000 settlement will resolve claims that the NFL team failed to adequately protect sensitive data, including names, Social Security numbers, and payment card information.

49ers Data Breach Exposed Personal Information of Customers and Employees

The lawsuits stemmed from a cyberattack where the ransomware gang BlackByte infiltrated the 49ers' computer network. This breach, which lasted for five days starting on February 6, 2022, allegedly occurred due to insufficient cybersecurity practices. 

As a result, the cybercriminals accessed and potentially misused the personal data of both customers who had purchased tickets and team employees. This included information about employees' dependents and their immigration statuses.

Settlement Provides Compensation and Cybersecurity Improvements

The settlement agreement, filed with the court on November 15, 2024, outlines several benefits for eligible class members. These benefits include cash payments for out-of-pocket losses, with class members able to submit claims for reimbursement of up to $7,500 per person for documented out-of-pocket losses incurred after February 6, 2022, that are directly related to the data breach.

Additionally, class members may also be entitled to receive a pro-rata share of any remaining settlement funds, even if they do not file a claim for out-of-pocket losses. California residents will receive three shares each in this distribution.

As part of the settlement, the 49ers have agreed to implement measures to improve their cybersecurity and better protect their network from future cyberattacks.

To receive a cash payout, class members must file a claim form by mail or online through the official settlement website once it is launched. 

Notice of the settlement will be mailed to class members within 30 days of the court granting preliminary approval. Class members will then have 90 days from the date of mailing to submit a claim form.

InjuryClaims.com will provide updates on the settlement website's availability.

Case Details

• Lawsuit: In re: San Francisco 49ers Data Breach Litigation
• Case Number: 3:22-cv-05138 
• Court: U.S. District Court for the Northern District of California, San Jose Division

Plaintiffs' Attorneys

• Matthew R. Wilson and Jarred W. Conners (Meyer Wilson Co., LPA)
• M. Anderson Berry and Gregory Haroutunian (Clayeo C. Arnold, APC)
• John J. Nelson (Milberg Coleman Bryson Phillips Grossman, PLLC)

Were you affected by the San Francisco 49ers data breach? Share your thoughts on the settlement in the comments below.