$2.95M STIIIZY data breach class action settlement

STIIIZY agreed to a $2.95 million class action settlement to resolve claims that it failed to prevent a 2024 data breach that compromised personally identifiable information or private health information.

The STIIIZY settlement benefits individuals whose personal information may have been accessed by an unauthorized third party in the STIIIZY data breach announced on Jan. 7, 2025.

According to the STIIIZY data breach class action lawsuit, STIIIZY failed to implement reasonable cybersecurity measures that could have prevented the 2024 data breach. As a result of this negligence, consumers had their information stolen by an unauthorized third party, the plaintiffs contend.

STIIIZY is a multi-state, vertically integrated cannabis company that controls growing operations, lifestyle product manufacturing and retail dispensaries.

STIIIZY has not admitted any wrongdoing but agreed to a $2.95 million class action settlement to resolve the data breach class action lawsuit.

Under the terms of the STIIIZY settlement, class members can receive a cash payment or a reimbursement of documented expenses related to the data breach.

Class members who experienced losses as a result of the data breach can receive up to $7,500 in reimbursement for these losses. This includes unreimbursed fraudulent charges, identity theft damages, credit monitoring expenses, bank fees and other damages.

Class members who did not experience losses as a result of the data breach can receive a proportional share of the settlement fund. Exact payments will vary depending on the number of participating class members and the amount claimed by each class member. California class members will receive twice the share of non-California class members.

All class members are eligible for two years of free credit monitoring and insurance services. This includes three-bureau credit monitoring, up to $1 million in identity theft insurance coverage, fraud consultation and identity theft restoration services.