A new class action lawsuit claims a data breach in June 2026 exposed the private information of 2.4 billion TikTok users. The lawsuit claims TikTok users’ names, usernames, email addresses, phone numbers, dates of birth, gender information, language information, and location information were all revealed in the breach.
“Data breaches force victims to maintain constant vigilance over the misuse of their information,” the lawsuit, filed by plaintiff Sean Mortazi, reads. “To lose control over personal information by no fault of your own can be devastating.”
Mortazi accuses TikTok of negligence, negligence per se, breach of implied contract, invasion of privacy, and unjust enrichment, according to the website Top Class Actions. He also claims TikTok violated California’s Unfair Competition Law, Consumer Privacy Act, and Customer Records Act.
“[TikTok] was well aware that the private information it collects, stores, uses and derives benefits from is highly sensitive and of significant value to those who seek to use it for nefarious purposes,” the lawsuit claims.
According to Mortazi, TikTok could have better restricted access to sensitive data by mandating step-up authentication for access to sensitive data, enforcing strict multi-factor authentication for employees and vendors, and monitoring its network for logins from unidentified locations.
He wants the case to be heard by a jury and is seeking declaratory and injunctive relief as well as a judgment of actual, compensatory, statutory, and punitive damages for himself and every class member.