{"action":{"id":"equifax-data-breach-class-action","slug":"equifax-data-breach-class-action","title":"Equifax Data Breach Class Action","category":"Data Breach","stage":"certified","tags":{"industry":["Banking and financial services","Privacy and data"],"geographic":["Canada-wide"],"eligibilityTrigger":["Held an account or contract"]},"allegationsSummary":"The lawsuit alleges that Equifax Canada Co. and Equifax, Inc. were negligent in setting up and running their cybersecurity systems, leaving known weaknesses unfixed, storing sensitive personal information without encryption, and failing to detect or stop a 2017 data breach that allegedly exposed the personal information of thousands of Canadians. It also alleges Equifax was warned about the problems but chose not to fix them while telling customers and the public that its cybersecurity was strong. The claim further alleges Equifax breached privacy and consumer protection laws and broke contracts with subscribers of its credit monitoring products, including Equifax Complete Advantage, Equifax Complete Premier, and Equifax Complete Friends and Family. None of these allegations has been proved in court.","proposedClassDefinition":"The certified class covers people in Canada in three groups: those whose personal information was accessed by hackers in the data breach (defined as the intrusion into Equifax computer systems from May 13, 2017 through July 30, 2017) but who did not buy an Equifax subscription product between March 7, 2017 and July 30, 2017, those who bought an Equifax subscription product between March 7, 2017 and July 30, 2017 but whose information was not accessed, and those who fit both descriptions. Subscription products include Equifax Complete Advantage, Equifax Complete Premier, Equifax Complete Friends and Family, and other Equifax products offering credit monitoring and identity theft protection.","whatHappensNext":"The Ontario court has certified the case as a class action, which means it may proceed on behalf of the class, but certification does not decide who is right. The next steps are the litigation itself, which could end in a trial, a settlement, or a dismissal. Timelines are uncertain and cases like this often take years. There is no claims process yet, and one would only open if a settlement is later reached and approved or the class wins at trial.","caseBackground":"This case is about a 2017 data breach at Equifax, a company that collects credit information and sells credit monitoring products. The lawsuit alleges that hackers got into Equifax computer systems between May 13, 2017 and July 30, 2017 and accessed the personal information of thousands of Canadians. The claim says Equifax knew about specific security weaknesses, including the one the hackers used, but did not fix them, stored sensitive information without encryption, and failed to detect or stop the intrusion, all while telling the public its cybersecurity was strong.\n\nThe plaintiffs seek money for the class for the alleged invasion of privacy, fraud and identity theft, harm to credit scores and reputation, the cost of credit monitoring, refunds of what subscribers paid for Equifax credit monitoring products, general damages for psychological distress, and punitive damages. The Ontario Superior Court of Justice has certified the case as a class action, but certification only means the case may go forward as a group lawsuit. Nothing has been proved and no settlement has been reached.","faqs":[{"answer":"Usually no. The case has been certified but there is no settlement and no claims process, so most class members do not need to take any step at this stage.","question":"Do I need to do anything right now?"},{"answer":"No. The case is still being litigated and no settlement has been reached, so there is nothing to claim right now. Money could become available only if a settlement is later reached and approved or the class succeeds at trial.","question":"Is there any money available to claim now?"},{"answer":"The class covers people in Canada whose personal information was accessed by hackers in the 2017 Equifax data breach, people who bought Equifax subscription products such as credit monitoring between March 7, 2017 and July 30, 2017, and people who fall into both groups.","question":"Who is included in the class?"},{"answer":"The case has already been certified, so the next steps are the litigation itself. A claims process could open only if the parties reach a settlement that a court approves, or if the class wins at trial. Neither outcome is certain.","question":"What has to happen before a claims process could open?"},{"answer":"There is no set timeline. Class actions like this often take years to resolve, and the outcome is uncertain.","question":"When might this case be resolved?"}],"proceedings":{"body":"The court filing behind this class action.","items":[{"id":"bea3691e7088dab8","url":"https://www.sotosclassactions.com/cases/equifax/","court":"Ontario Superior Court of Justice","firms":[{"name":"Sotos LLP"}],"stage":"certified","caseName":"Alina Owsianik v. Equifax Canada Co. et al.","dateFiled":"2017-09-12","fileNumber":"CV-17-00582551-00CP","jurisdiction":"Ontario"}],"heading":"The proceeding"},"plaintiffFirms":[{"name":"Sotos LLP","contacts":[]}],"sourceDocuments":[{"url":"/uploads/8fdc0f69993c85c91d82e23e-Schedule-A-Long-Form-Notice-Updated-ENG-Updated.pdf","title":"Schedule-A-Long-Form-Notice-Updated-ENG-Updated.pdf"},{"url":"/uploads/d5aace4911d7cde5a90ae202-Schedule-A-Long-Form-Notice-Updated-FR-Updated.pdf","title":"Schedule-A-Long-Form-Notice-Updated-FR-Updated.pdf"}],"filedDate":"2017-09-12","certificationHearingDate":"2025-11-18","stageChangedAt":"2026-09-21 02:23:23","lastReviewed":"2026-09-15","outcomeSummary":"","promotedSettlementSlug":"","relatedSlugs":[],"dateAdded":"2026-09-15","lastUpdated":"2026-09-20","languages":["en","fr"]}}