📋 Case Overview

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Cases Covered:     3

Verticals:         TCPA, Data Privacy

Last Updated:      March 2026

TCPA & Data Privacy Lawsuits to Watch: March 2026 Roundup

Three significant developments in privacy and consumer protection litigation are making headlines this month. From alleged robotext campaigns tied to sweepstakes schemes to a major data breach investigation and a key courtroom ruling in an ongoing TCPA case, here's what consumers and legal observers should know heading into March 2026.

1. What If Holdings LLC / C4R Media Corp — TCPA Robotext Class Action

Status: Newly Filed

Alleged Violations: TCPA (unsolicited automated text messages)

Who May Be Affected: Consumers who received unsolicited marketing texts from or on behalf of C4R Media Corp

According to a recent report covering the class action filing, What If Holdings LLC, doing business as C4R Media Corp, is facing a TCPA class action lawsuit over an alleged "robotext bombardment" targeting consumers. The complaint reportedly stems from a sweepstakes-style lead generation model — a practice in which websites advertise gift cards or cash prizes to attract consumer information — which the lawsuit alleges was used to generate consent for mass automated text message campaigns.

The lawsuit alleges that consumers received unsolicited marketing texts without lawful prior express consent, a requirement under the Telephone Consumer Protection Act. Under the TCPA, consumers may be entitled to $500 per violation for negligent violations, and up to $1,500 per violation where a court finds willful or knowing conduct.

Consumers who believe they received unsolicited texts tied to sweepstakes-style promotions and believe they may have been targeted by C4R Media Corp's alleged campaign may wish to consult with a TCPA attorney to understand their options. No settlement has been announced at this time.

2. LexisNexis — Alleged Data Breach by FULCRUMSEC Extortion Group

Status: Under Investigation; No Class Action Filed as of Publication

Data Allegedly Exposed: Corporate, government, and customer intelligence data; AWS infrastructure

Who May Be Affected: LexisNexis customers, business clients, and individuals whose data may be held in LexisNexis databases

A cybercriminal group identifying itself as FULCRUMSEC has publicly claimed responsibility for breaching the systems of LexisNexis, the legal, regulatory, and business analytics division of RELX Group. According to reporting on the alleged incident, the threat actors claim they exploited a vulnerable container role to gain widespread access to LexisNexis's Amazon Web Services infrastructure, allegedly bypassing access controls to exfiltrate significant volumes of sensitive data — including corporate, government, and customer intelligence records.

LexisNexis has confirmed it is investigating the claims, though no official confirmation of a successful breach or the scope of any data exfiltration had been issued as of publication. No class action lawsuit has been filed in connection with this alleged incident as of the time of this writing, but such claims have historically preceded litigation when data of this sensitivity and scale is involved.

Given that LexisNexis maintains extensive databases touching on legal records, financial information, and personal identifying data, the potential scope of any confirmed breach could be significant. Consumers and businesses with accounts or data held by LexisNexis should monitor official communications from the company and watch for any notifications of unauthorized access.

Note: This situation is developing. No claims have been verified by LexisNexis, and no settlement or litigation filing is currently linked to this alleged incident.

3. eXp Realty — Court Upholds Key Expert in TCPA Class Action

Status: Active Litigation; Class Certification Stage

Alleged Violations: TCPA (unsolicited calls/texts)

Who May Be Affected: Individuals who received unsolicited telemarketing calls or texts from or on behalf of eXp Realty

In a notable procedural development, a federal court has refused to strike the testimony of Anya Verkhovskaya, a prominent TCPA class action expert witness, in an ongoing lawsuit against eXp Realty. According to reporting on the ruling, the court rejected eXp Realty's motion to exclude Verkhovskaya's expert analysis, with the court stating that eXp's arguments "lack merit."

Expert witnesses like Verkhovskaya typically play a central role in TCPA class actions by analyzing call or text records to help identify and quantify a class of affected consumers. When courts deny motions to strike such experts, it generally signals that a case may proceed toward class certification — a critical threshold that, if reached, allows the lawsuit to represent a large group of consumers rather than a single plaintiff.

The denial does not constitute a finding of liability against eXp Realty. The company disputes the claims, and the litigation is ongoing. However, consumers who believe they received unsolicited telemarketing calls or texts from parties acting on eXp Realty's behalf may be following this case closely as it progresses.

Key Takeaways

• Sweepstakes-style lead generation is drawing increased legal scrutiny. The C4R Media lawsuit reflects a broader pattern of TCPA litigation targeting companies that allegedly use prize or gift card promotions to collect consumer contact information for mass texting campaigns.
• Large-scale data incidents don't always result in immediate lawsuits — but often lead to them. The LexisNexis situation is still developing; consumers should watch for breach notifications and monitor whether class action filings follow.
• Expert witness rulings can signal where a TCPA case is headed. The court's refusal to strike Anya Verkhovskaya in the eXp Realty case is a procedural development that could have meaningful implications for whether a class is ultimately certified.
• TCPA violations can carry significant per-message penalties — $500 to $1,500 per text or call — which is why class actions in this space can involve large aggregate damages even when individual harm seems minor.
• Consulting a consumer protection attorney is the appropriate first step for anyone who believes they were affected by any of the above situations. Eligibility for any potential claim can only be determined on an individual basis by a qualified attorney.

Are you tracking any of these cases or have you received unsolicited marketing texts from sweepstakes-related campaigns? Share your experience in the comments below.

InjuryClaims.com reports on class action lawsuits and legal developments for informational purposes only. Nothing in this article constitutes legal advice. Readers should consult a licensed attorney regarding their individual circumstances.