On November 19, 2020, children’s clothing retailer Hanna Andersson agreed to pay $400,000 to settle a class-action data breach lawsuit that was among the first to cite the California Consumer Privacy Act (CCPA) in its judgment.
The breach occurred in 2019 when hackers gained access to the personally identifiable information (PII) of approximately 200,000 Hanna Andersson customers, and used credit card data to make online purchases from September 16 through November 11. The proposed settlement is the first class-wide settlement involving CCPA statutory damages.
