Skip to content

Published · United States

HIPAAHigh severityEnforcement action

GoodRx and Criteo settle data breach class action for $32 million

A court approved a revised settlement of $32 million between GoodRx and Criteo to end a class‑action lawsuit over a data breach.

1 source · $32M penalty

Illustration

What happened

The case was reported by The HIPAA Journal on 29 October 2026.

Why it matters

Other health‑service platforms and ad‑tech companies should review their breach‑response contracts, as similar class actions can result in multi‑million settlements.

Business impact

Organizations handling health data must ensure robust security and clear liability clauses to avoid costly litigation.

Drafted automatically from the sources below. How we write summaries

Does this summary seem wrong?

Discussion

No comments yet. Start the discussion.

Free account required