Data Breach

Lulus.com Hit with Class Action over Customer Doxing Claims

Updated on
Published on
Lulus.com Hit with Class Action over Customer Doxing Claims

In the bustling world of online fashion retail, Lulu's Fashion Lounge, LLC, a Delaware entity doing business as Lulus.com, is now facing a class-action lawsuit. The suit, filed on September 27, 2023, alleges that the fashion retailer has been breaching its users' privacy rights in a rather alarming manner.

The plaintiff, Miguel Esparza, alleges that Lulus.com has been using surveillance tools on its website to identify and 'dox' anonymous visitors. The term 'dox' refers to the public disclosure of private or identifying information about an individual without their consent. Esparza further alleges that the company has been enabling third parties to wiretap and eavesdrop on conversations conducted through the website's chat feature. According to the lawsuit, "Defendant's conduct includes de-anonymizing internet users and collecting personal information without consent." This alleged conduct violates the rights to privacy and online anonymity, which are increasingly recognized as fundamental rights in the digital age.

The complaint further alleges that Lulus.com's chat feature is secretly monitored, intercepted, and recorded without informing visitors. According to the plaintiff, this is a clear violation of the California Invasion of Privacy Act (Cal. Penal Code § 631(a) and § 632.7), which prohibits the interception or recording of confidential communications without the consent of all parties involved.

Moreover, the lawsuit alleges that the company's actions violate the California Unauthorized Access to Computer Data Act (Cal. Penal Code § 502). This law is designed to protect individuals from unauthorized access to their computer data and systems and carries both civil and criminal penalties. The plaintiff also claims that Lulus.com's actions violate the privacy protections enshrined in the California Constitution, Article I, § 1. This provision guarantees the right to privacy, which the plaintiff alleges has been grossly violated by the company's alleged conduct.

The lawsuit seeks injunctive relief, statutory damages, actual damages, and punitive damages. Injunctive relief would require the company to stop its alleged practices, while statutory damages are fixed amounts the law provides for in response to specific violations. Actual damages would compensate the plaintiff and class members for any harm they have suffered due to the alleged conduct, and punitive damages would punish the company and deter similar behavior in the future.

Esparza's lawsuit represents all persons within the United States who visited Lulus.com and were allegedly exposed to the company's wrongful conduct. This class-action suit aims to hold the company accountable for its alleged violations of privacy rights, unauthorized access to computer data, and constitutional rights.

The lawsuit paints a picture of a company that allegedly took advantage of its users' trust for its gain. It tells a story of alleged invasion of privacy, de-anonymization, and unauthorized surveillance. It is a reminder of the importance of privacy rights in the digital age and the need for companies to respect them.

Case Facts

  • Status:
    Lawsuit Filed
  • Case Number:
    2:23-cv-08083
  • Filing Date:
    September 27, 2023
  • Jurisdiction:
    Los Angeles County
  • State:
    California
  • Court:
    California Superior Court
  • Plaintiff:
    Miguel Esparza
  • Defendant:
    Lulu's Fashion Lounge, LLC d/b/a Lulus.com
  • Plaintiff Firm:
  • Defendant Firm:
  • Claims Administrator:
Contributors
Kevin Salzman, Esq.
Kevin Salzman, Esq.
Reporter and Licensed Attorney
Weekly newsletter

Stay up to date with new class action settlements you may join.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Complaint

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Related class action lawsuits

Read more to get notified about updates to each case.

Patelco Credit Union Faces Lawsuit Over Alleged Data Breach
Data Breach

Patelco Credit Union Faces Lawsuit Over Alleged Data Breach

Patelco Credit Union is facing a class-action lawsuit alleging inadequate data security practices that led to a data breach, violating several consumer protection laws.
Multi-Million Dollar Lawsuit Against CLEAResult Over Data Breach
Data Breach

Multi-Million Dollar Lawsuit Against CLEAResult Over Data Breach

Lawsuit alleges CLEAResult Consulting Inc. failed to secure sensitive customer data, potentially exposing thousands to identity theft and fraud.
Lulus.com Hit with Class Action over Customer Doxing Claims
Data Breach

Lulus.com Hit with Class Action over Customer Doxing Claims

Lawsuit alleges Lulus.com violated privacy laws, doxed users, and enabled third-party eavesdropping. These are all allegations at this stage.
Cornwell Quality Tools Faces Class Action Lawsuit Over Data Breach
Data Breach

Cornwell Quality Tools Faces Class Action Lawsuit Over Data Breach

Alleged data breach at Cornwell Quality Tools leads to class-action lawsuit. Plaintiff claims negligence, breach of duty, and violation of legal obligations.
Nice Pak Products Faces Class Action Over Data Breach
Data Breach

Nice Pak Products Faces Class Action Over Data Breach

Lawsuit alleges Nice Pak Products, Inc. failed to protect employees' personal information, leading to a data breach. Damages sought for negligence, violation of FTC Act.
Peoples Bank Faces Lawsuit Over Data Breach, Customers Seek Damages
Data Breach

Peoples Bank Faces Lawsuit Over Data Breach, Customers Seek Damages

Lawsuit alleges Peoples Bank's negligence led to a data breach, compromising sensitive personal information of approximately 47,590 customers.
Caesars Entertainment Faces Multi-Million Dollar Lawsuit Over Data Breach
Data Breach

Caesars Entertainment Faces Multi-Million Dollar Lawsuit Over Data Breach

Caesars Entertainment is facing a lawsuit over a data breach. Allegations include negligence, invasion of privacy, and breach of contract.
Progressive Insurance Hit with Lawsuit Over Alleged Data Breach
Data Breach

Progressive Insurance Hit with Lawsuit Over Alleged Data Breach

Progressive Casualty Insurance Company faces a lawsuit alleging failure to protect customers' personal information during a data breach, a violation of the FTC Act.
HCA Healthcare Faces Class Action Lawsuit Over Data Breach
Data Breach

HCA Healthcare Faces Class Action Lawsuit Over Data Breach

Class-action lawsuit alleges HCA Healthcare violated data privacy laws, leading to a massive data breach affecting millions of patients.
PurFoods Faces Lawsuit Over Massive Data Breach: Damages Sought
Data Breach

PurFoods Faces Lawsuit Over Massive Data Breach: Damages Sought

Douglas and Goodon allege PurFoods' negligence led to a massive data breach, violating HIPAA and FTC Act, and seek damages for the compromised private information.
PurFoods Faces Multi-Million Dollar Lawsuit Over Alleged Data Breach
Data Breach

PurFoods Faces Multi-Million Dollar Lawsuit Over Alleged Data Breach

Lawsuit alleges PurFoods, also known as Mom's Meals, failed to protect customer data, leading to a breach affecting over 1.2 million individuals.
TMG Health Faces Lawsuit Over Alleged Data Breach
Data Breach

TMG Health Faces Lawsuit Over Alleged Data Breach

Lawsuit alleges TMG Health failed to protect clients' sensitive information, leading to a potential data breach. The company is accused of violating HIPAA and other laws.
MAPFRE Faces Lawsuit Over Alleged Privacy Violations - Damages Sought
Data Breach

MAPFRE Faces Lawsuit Over Alleged Privacy Violations - Damages Sought

Brian Conway files a lawsuit against MAPFRE and The Commerce Insurance Company for allegedly violating the DPPA by disclosing drivers' license numbers.
Rite Aid Faces Lawsuit Over Alleged Data Breach, Plaintiffs Seek Compensation
Data Breach

Rite Aid Faces Lawsuit Over Alleged Data Breach, Plaintiffs Seek Compensation

Rite Aid Corporation is accused of negligence and violation of data security and privacy laws in a lawsuit following a data breach that allegedly exposed customer information.
Clients Seek Damages from Regal Securities in Lawsuit Over Data Breach
Data Breach

Clients Seek Damages from Regal Securities in Lawsuit Over Data Breach

Lawsuit alleges Regal Securities, Inc. mishandled personal data, leading to a breach. Clients seek damages for negligence and violation of Illinois consumer protection laws.
Jackson National Life Insurance Faces Multi-Million Dollar Lawsuit Over Data Breach
Data Breach

Jackson National Life Insurance Faces Multi-Million Dollar Lawsuit Over Data Breach

Lawsuit alleges Jackson National Life Insurance Company failed to protect customers' personal data, leading to a data breach. Plaintiffs seek damages for invasion of privacy, lost productivity, and increased risk of identity theft.
Advance America Faces Lawsuit Over Data Breach, Plaintiff Seeks Damages
Data Breach

Advance America Faces Lawsuit Over Data Breach, Plaintiff Seeks Damages

Lawsuit alleges Advance America failed to secure and safeguard personally identifiable information, leading to a data breach.
Progress Software Corp. Faces Class Action Over Data Breach
Data Breach

Progress Software Corp. Faces Class Action Over Data Breach

A class-action lawsuit alleges that Progress Software Corporation and Maximus Federal Services failed to safeguard customers' personally identifiable information, leading to a significant data breach.
AMM Faces Class Action Lawsuit Over Data Breach, Plaintiffs Seek Damages
Data Breach

AMM Faces Class Action Lawsuit Over Data Breach, Plaintiffs Seek Damages

Lawsuit alleges Advanced Medical Management, LLC failed to protect sensitive personal data of over 300,000 individuals, leading to a data breach.
Mondelez Global Data Breach Class Action: 51k People Impacted
Data Breach

Mondelez Global Data Breach Class Action: 51k People Impacted

Mondelez Global LLC faces a class action lawsuit for allegedly failing to protect personal data, leading to a breach. The plaintiff seeks at least $5 million in damages.
Class Action Lawsuit - Ipswitch, Inc. & Progress Software Data Breach
Data Breach

Class Action Lawsuit - Ipswitch, Inc. & Progress Software Data Breach

Class action lawsuit alleges Ipswitch, Inc. and Progress Software Corporation's negligence led to a data breach, exposing sensitive personal information.
PharMerica Corporation Class Action Filed Over Data Breach
Data Breach

PharMerica Corporation Class Action Filed Over Data Breach

Pharmerica Corporation is facing a class action lawsuit alleging negligence in protecting customers' private information, potentially leading to a data breach.
Kraemer North America Faces Class Action Over Data Breach
Data Breach

Kraemer North America Faces Class Action Over Data Breach

Kraemer North America is facing a class-action lawsuit over an alleged data breach. The lawsuit alleges the company failed to secure employees' data and notify them promptly.
Apria Healthcare Class Action: Alleged Data Breach
Data Breach

Apria Healthcare Class Action: Alleged Data Breach

Lawsuit alleges Apria Healthcare failed to protect customer data, leading to a data breach.
$5 Million Lawsuit - Veridian Credit Union's Alleged Data Breach
Data Breach

$5 Million Lawsuit - Veridian Credit Union's Alleged Data Breach

Class action lawsuit alleges Veridian Credit Union failed to protect customer data, violating multiple laws.
Albertsons Data Breach: Class Action Lawsuit at least $5m
Data Breach

Albertsons Data Breach: Class Action Lawsuit at least $5m

Lawsuit alleges Albertsons Companies failed to protect personal information of customers in a data breach, violating privacy and security laws.