Threat Actor: Oracle | Oracle
Victim: 220 million users | 220 million users
Price: $115 million
Exfiltrated Data Type: User data
Key Points :
- Oracle has agreed to pay $115 million to settle a class-action lawsuit regarding improper user data use.
- The settlement compensates 220 million affected users.
- The company will cease the collection of certain electronic communications and implement an audit program for data protection compliance.
- The lawsuit was initiated in 2020, focusing on Oracle’s data privacy practices.
- Claims under Florida laws and the Federal Wiretap Act were dismissed, leading to the current settlement.
Oracle has agreed to pay $115 million to settle a two-year class-action lawsuit regarding the improper use of user data. The settlement provides compensation for 220 million affected users.
Oracle will contribute $115 million to an irrevocable fund, which will be evenly distributed among the settlement group members. Additionally, the company has committed to ceasing the collection of certain types of electronic communications and implementing an audit program to ensure its clients comply with contractual data protection obligations.
The plaintiffs initiated an investigation into Oracle’s data privacy practices in 2020. The investigation included the analysis of publicly available data, such as complaints from client organizations and government regulators, academic articles, news reports, books, web pages, marketing materials, privacy policies, and disclosure policies.
The plaintiffs also obtained Offline Access Request Reports (OARRR) from Oracle, which played a crucial role in the proceedings. After consulting with experts who conducted investigations and analyzed Oracle’s public technical documentation, the plaintiffs filed the lawsuit in August 2022.
The lawsuit alleged that Oracle’s data-selling activities violated Internet users’ right to privacy under the California Constitution, as well as various federal and state data protection laws. In April, the court dismissed claims brought under Florida laws and the Federal Wiretap Act, paving the way for the current settlement. Oracle has yet to provide comments.
Related Posts:
Original Source: https://securityonline.info/115-million-payout-oracle-ends-user-data-privacy-battle/