Consumers are using the newly enforceable California Consumer Privacy Act (CCPA) to sue companies they say have mishandled their data. Walmart is the latest company to be slapped with a lawsuit.
A San Francisco man alleges in a class-action lawsuit filed with the U.S. Northern District of California on July 10 that the retail giant was hacked and the personal information—including his credit card—that he gave to the company is being sold on the dark web. The man, Lavarious Gardiner, says hundreds of other Walmart customers have similarly seen their Walmart data appear on the dark web, where criminals and fraudsters sell and trade it. Gardiner says he has been forced “to purchase a credit and personal identity monitoring service to alert him to potential misappropriation of his identity and to combat risk of further identity theft.”

