Overview
Data-breach class actions have exploded since 2017 (Equifax) and 2021 (T-Mobile). Most claims invoke state consumer-protection statutes plus common-law theories. Several states (California, Illinois, New York) have private rights of action with statutory damages — making BIPA (Illinois biometric law) and CCPA (California) favorite plaintiff-side tools.