FabFitFun, a fashion and beauty subscription service, settled claims that it failed to adequately protect and secure consumer data resulting in a data breach for a sum of $625,000 in the U.S. District Court for the Central District of California. In addition to agreeing to the monetary settlement, FabFitFun agreed to implement security measures, including engaging a third-party cybersecurity forensic vendor to conduct a risk assessment, offer multi-factor authentication for customers to access their accounts, and hire additional security and technical personnel to assist in building a more robust data privacy and security program for the company.

Plaintiff Cheryl Gaston sued FabFitFun in October 2020, alleging that the company failed to protect its customers’ data against hacker data scraping that compromised payment card information.

The settlement class includes 441,000 consumers; the deadline for individuals to opt-out of the settlement was June 16, 2021. To date, the claims administrator has not received any objections and only five (5) opt-out requests.

[View source.]