Salesforce Ordered to Face Class Action Lawsuit Over Massive Data Breach

Salesforce Inc. has been ordered to face most claims in a class action lawsuit over a massive data breach that exposed millions of customers' personal information in 2025.

The plaintiffs, who are 18 clients of Salesforce's corporate clients, alleged that the company negligently failed to protect their data and violated several state consumer protection laws.

US District Court for the Northern District of California Judge Jacqueline Scott Corley ruled that the plaintiffs have sufficiently shown injury in fact, which is a requirement for standing to sue in federal court.

The judge also found that the plaintiffs adequately pleaded claims of negligence and violations of the California Consumer Privacy Act, the Illinois Consumer Fraud Act, and the Washington Consumer Protection Act.