La Jolla Group - Data Breach Class Action Settlement

Data Breach · Claims Open

Current Status

Claims are open. The deadline to file is November 23, 2026, and the deadlines to opt out and to object fall on that same date. The Court has scheduled a Final Approval Hearing for December 17, 2026 at 2:00 p.m. Pacific Time in Department CX102 in Santa Ana, California, and the settlement has not been approved yet. No payment date has been announced: the Notice says approved claims are paid after the Effective Date, and that no benefits are provided unless the Court approves the Settlement and it becomes final. If a postcard notice reached you, it carries the Claim Number and PIN you need to open the online claim form.

What Changed Recently?

The settlement is newly open to claims. La Jolla Group, Inc. has agreed to resolve Jaime Dempsey, et al. v. La Jolla Group, Inc., Case No. 30-2024-01416569-CU-MC-CXC, in the Superior Court of California for the County of Orange, and the Court has authorized notice to the class. Analytics Consulting LLC is administering it, and the claim portal, the long-form notice, the claim form and the case documents are live on the official settlement website.

La Jolla Group expressly denies the allegations and says it has strong legal defenses. The Notice states that the Court has not determined whether the plaintiffs or La Jolla Group are correct, and that the parties settled after arm's-length negotiation to avoid the cost, risk and delay of continuing to litigate. No finding of liability has been made.

What the Case Is About

According to the Notice, the plaintiffs allege that La Jolla Group failed to properly secure and safeguard the personal information of its current and former employees, and that the information was posted on the Dark Web as a result of a cybersecurity incident in or around November 2023.

That last detail is what separates this case from the ordinary run of breach settlements. Most notices describe information that was accessed, or that may have been acquired — a possibility of exposure. The allegation here is that employee data actually surfaced on the Dark Web, which is the point at which exposure stops being theoretical and the file is presumed to be in circulation. It remains an allegation that the Court has not ruled on, and La Jolla Group denies it.

The Notice does not itemize which data fields were involved. What it does establish is whose data it was: employment records rather than customer records. An employer file is the most complete dossier most people have anywhere — the Social Security number, the date of birth, the home address and usually the bank details for direct deposit, all held together and all still accurate years after someone leaves the job. Card numbers get reissued after a retail breach; a personnel file does not expire. Our explainer on how data breach class actions work covers what these cases typically pay and what a release costs.

Who Qualifies?

The Settlement Class is defined as all current and former employees of La Jolla Group who reside in the United States and whose information was impacted by the Cybersecurity Incident.

Class membership does not depend on where you live now, only on residing in the United States and on having been an employee whose information was impacted. Someone who left the company years before the November 2023 incident is still covered if their file was in the affected data, and the postcard notice is the practical signal: the administrator identified recipients from La Jolla Group's own records, so a notice arriving is the company saying its records place you in the class.

A separate California Subclass exists and is paid more in flat cash — $95 rather than $45. The Notice states the two figures without defining the subclass; that definition sits in the Settlement Agreement posted on the official settlement website.