Florida Judge Allows Class Action Against Kaplan
A federal court ruled that negligence and contract claims against the company may move forward following a 2025 breach.
Updated on Oct. 22, 2026 in Cybersecurity
Live Poll
Should companies be held legally liable for data breaches involving consumer information?
A Florida federal judge has greenlit a proposed class action lawsuit against Kaplan, allowing negligence and contract-related claims to proceed. This decision follows a court ruling regarding a motion to dismiss the case tied to a 2025 data breach.
Why it matters
The court's decision narrows the focus of the legal battle by permitting plaintiffs to pursue claims regarding the handling of their data. While some allegations were cleared, the ruling ensures the company remains accountable for potential failures in data security protocols.
The federal court ruled on a motion to dismiss, officially clearing claims of unjust enrichment and California data privacy law violations while allowing negligence and contract claims to advance.
The players
Kaplan
Kaplan is an international educational services company that provides test preparation, professional training, and university support services.
The details
The lawsuit centers on the fallout from a 2025 data breach that compromised user information. By dismissing specific California-based privacy and enrichment claims, the Florida judge effectively narrowed the scope of the legal proceedings currently facing the institution.
Timeline
The data breach at Kaplan occurred in 2025.
The judge issued the ruling on the class action motion on October 21, 2026.
The Tech Race
The court's dismissal of California data privacy law claims marks a departure from broader attempts to apply state-specific statutes to nationwide class action filings. This ruling reflects an ongoing trend where courts scrutinize the jurisdictional reach of regional privacy regulations in complex, multi-state cybersecurity litigation.
For users affected by the 2025 breach, this ruling represents a significant step in the legal process toward potential recovery or settlement. Consumers should monitor updates on the case to understand if they are eligible to participate in the ongoing class action.
The takeaway
This ruling highlights the importance of data protection for large educational institutions and the complexity of holding companies accountable for security failures. Readers should remain vigilant regarding their personal information by using unique passwords and enabling multi-factor authentication on all accounts.
Further reading
Stay updated on regional digital safety developments by following the Florida Cybersecurity section.
Live Poll
Should companies be held legally liable for data breaches involving consumer information?
