The First Wave of CCPA Allegations Makes its Way into a New Data Breach Class Action Against Salesforce and Hanna Andersson

Salesforce.com and Hanna Andersson LLC are on the receiving end of a novel lawsuit, which appears to be the first data breach class action filed with alleged violations of the California Consumer Privacy Act: Barnes v. Hanna Andersson, LLC. The plaintiffs allege four causes of action for negligence; declaratory relief; and violations of the California Unfair Competition Law, Business and Professions Code § 17200.

They claim that Salesforce, a cloud-based software company, and Hanna Anderson, a high-end children’s clothing retailer, failed to protect their data, to provide adequate cybersecurity warnings, and to safeguard their platforms from intruders. The complaint does not allege an express cause of action for a violation of the CCPA, but instead predicates their UCL § 17200 causes of action, in part, on alleged violations of the CCPA.

Read the full post at Mintz, Levin, Cohn, Ferris, Glovsky and Popeo, P.C.