Website Tracking & Wiretap Litigation Cases
Tracked website tracking litigation matters from the Crandall Consulting intelligence database. Each page reports what public sources say — including procedural posture — without overstating holdings. Also see tracking laws, technologies, and research.
Torres v. SeatGeek, Inc.
A Northern District of California magistrate judge granted a Rule 12 motion to dismiss Torres v. SeatGeek for lack of Article III standing, holding that routine metadata collected via tracking pixels (IP, device/browser metadata, cookie IDs…
Caldwell v. InMobi Pte. Ltd.
The Northern District of California denied InMobi’s motion to dismiss a putative class action alleging CIPA pen register violations and California privacy torts, holding the pleading sufficiently alleges modern tracking technologies can sat…
W.W. v. Orlando Health
A Wiley Rein alert describes a surge in litigation alleging that common website technologies (cookies, analytics, pixels, chat, etc.) give rise to claims under pre‑internet state wiretap statutes such as California's CIPA and Florida's FSCA…
NetScout Systems, Inc. (case name not specified in article)
A Los Angeles County Superior Court judge ruled that the pen register and trap-and-trace provisions of the California Invasion of Privacy Act apply only to telephone communications and not to an SDK used on a commercial website, sustaining …
Nelson v. Reddit, Inc.
This is a February 17, 2026 United States District Court (S.D. Cal.) order denying Reddit, Inc.'s motion to dismiss a class action complaint alleging that a LiveRamp tracker on Reddit's website constitutes a pen register under CIPA. The cou…
Javier v. Assurance IQ
This guide explains the distinction between CIPA (California Penal Code Section 631) and the CCPA/CPRA opt-out regime, discusses an unpublished Ninth Circuit decision (Javier v. Assurance IQ) that suggested Section 631 applies to internet c…
Paul Nakamura v. Pfizer Inc.
Privado AI reports that a proposed class action filed May 12, 2026 alleges Pfizer's website continued to transmit visitor data to Google tracking tools after users selected 'Decline All' on a consent banner. The complaint asserts claims und…
Javier v. Assurance IQ, LLC and Active Prospect Inc.
The ArentFox Schiff blog reports on an unpublished Ninth Circuit panel decision in Javier v. Assurance IQ, holding that California Penal Code Section 631 requires prior express consent before recording web interactions, and that retroactive…
Greenley v. Kochava
The article reports a growing wave of California CIPA "pen-register" complaints and demand letters alleging that common third-party website trackers (analytics tags and pixels that fire on page load) constitute pen registers under Californi…
Fregosa v. Mashable Inc.
A federal district court in the Northern District of California denied Mashable’s motion to dismiss a Second Amended Complaint alleging that third-party web trackers installed on Mashable’s site recorded IP addresses and device identifiers …
Crano v. Sojern, Inc.
A California federal judge dismissed the Second Amended Complaint in Crano v. Sojern, Inc. for lack of Article III standing, finding the plaintiff failed to allege a concrete injury. The court rejected theories based on intangible privacy h…
Laura Gilbert v. Brooklinen, Inc.
This is a putative class-action complaint filed June 18, 2026, in the Eastern District of New York alleging that Brooklinen’s website deployed third‑party tracking technologies (pixels, cookies, analytics) despite users rejecting non‑essent…
E.H. et al v. Lifelong Adoptions, Inc.
The federal district court granted LifeLong’s motion to dismiss in part and denied it in part on July 24, 2026. Several claims were dismissed (some with leave to amend, others without), while multiple privacy-related claims under California…
In re Meta Android Privacy Litigation
This May 11, 2026 district-court order in the consolidated In re Meta Android Privacy Litigation granted in part and denied in part motions to dismiss: three specific claims were dismissed with leave to amend while the remainder survived. T…
C.B. v. Planned Parenthood Federation of America, Inc.
A proposed class action filed June 19, 2026 in SDNY alleges Planned Parenthood and regional affiliates transmitted appointment-booking selections and related details to third parties (notably Google) via embedded trackers and that tracking …
FTC v Kochava, Inc.
This is an FTC Legal Library page titled "FTC v Kochava, Inc." (page date 2026-06-26). The extracted content contains only site navigation and header material and does not include any substantive details about filings, claims, allegations, …
Blaker v. Netscout Systems
A Loeb & Loeb analysis describes a Los Angeles Superior Court decision in Blaker v. NetScout where the court dismissed a CIPA class action with prejudice, holding that the pen-register/trap-and-trace statutory provision does not reach ordin…
Greenley v. Kochava, Inc.; Javier v. Assurance IQ, LLC
This law-firm blog post summarizes a wave of California Invasion of Privacy Act (CIPA) class actions alleging that website and app trackers, session-replay tools, and chat vendors intercept communications or function as pen registers. The a…
Vivek Shah v. Crain Communications, Inc.
A federal district court in the Central District of California declared Vivek Shah a vexatious litigant on July 20, 2026 and entered a pre-filing order requiring leave of court before Shah may file new CIPA or related digital privacy suits …
Vivek Shah
The provided page text is largely site navigation and practice-area links. The page title states that a California federal court declared serial CIPA plaintiff Vivek Shah a vexatious litigant, but the article body and case details are not p…
Adair, et al. v. Cigna Corporate Services, LLC and the Cigna Group
A Klein Moynihan Turco blog post summarizes a Pennsylvania federal judge's dismissal of plaintiffs' ECPA, WESCA, and invasion of privacy claims against Cigna on the ground that plaintiffs consented to use of third-party tracking technologie…
Delong v. PHE, Inc.
A federal district court in the Eastern District of Pennsylvania denied a motion to dismiss an amended complaint alleging that the Adam Eve website used Google Analytics to collect intimate user data, finding the plaintiff sufficiently alle…
Popa v. PSP Group LLC
The U.S. Court of Appeals for the Ninth Circuit decided Popa v. PSP Group LLC, holding that plaintiffs lacked Article III standing to challenge routine session-replay/website-tracking where no embarrassing, intimate, or historically protect…
Shapiro v. DOJ
The U.S. District Court for the District of Columbia issued a Nov. 25, 2025 decision in Shapiro v. DOJ (No. 16-1263) resolving cross-motions for summary judgment in a FOIA/FOIPA case. The court granted in part and denied in part both sides’…
Rounds v. Development Dimensions International
The complaint alleged that DDI installed a 6Sense data-broker SDK and cookies that deanonymized visitors, invoking California Penal Code §638.51's trap-and-trace prohibition. The U.S. District Court for the Central District of California di…
Muraski v. Penn Highlands Healthcare, Inc.
On February 9, 2026 the U.S. District Court for the Western District of Pennsylvania issued an opinion in Muraski v. Penn Highlands Healthcare granting the defendant's motion to dismiss without prejudice and stating an appropriate order wil…
Grubor, et al. v. Barefoot Dreams, Inc.
This document is a settlement agreement (with exhibits) for Grubor v. Barefoot Dreams, Inc., Case No. CACE26003507, in the Circuit Court of the 17th Judicial Circuit, Broward County, Florida. The complaint alleges Barefoot Dreams disclosed …
W.W. v. Orlando Health, Inc., No. 6-24-cv-1068-JSS-RMU
A Robinson+Cole blog post reports a 2025 Middle District of Florida decision (W.W. v. Orlando Health) that found allegations that website tracking tools captured substantive healthcare communications sufficiently alleged interception under …
Popa v. Microsoft Corp.
This Holland & Knight alert describes conflicting rulings in California over whether web-based tracking technologies (e.g., pixels and IP-address collection) fall within CIPA Section 638.51. It highlights the Ninth Circuit's Popa v. Microso…
Javier v. Assurance IQ; Greenley v. Kochava
This industry article summarizes mid-2026 developments in California CIPA litigation alleging website-based wiretapping and pen-register violations. It explains the statutes at issue (including §§631(a) and 638.51), notes key decisions (Jav…
Delsignore v. Zazzle, Inc.
A proposed class action filed Oct. 13, 2022 (Delsignore v. Zazzle, Inc.) alleges Zazzle used session-replay software on www.zazzle.com to record visitors' mouse movements, clicks, keystrokes, search terms and other inputs without disclosure…
Birdsall v. PNC Bank NA; Erakat v. PNC Bank, National Association
LegalClarity reports that PNC faces two proposed class actions alleging pixel trackers and session-replay/form-capture technologies on its website transmitted browsing data to third-party advertising platforms. One suit was filed in Pennsyl…
Zeolla et al. v. Southern New Hampshire University
The article reports a December 17, 2025 federal class action against Southern New Hampshire University alleging undisclosed tracking pixels and related technologies transmitted student data to Google and TikTok, raising ECPA and New Hampshi…
Petris v. Sportsman’s Warehouse, Inc., et al.
This is a court-authorized class notice for a proposed settlement in Petris v. Sportsman’s Warehouse, alleging Defendants disclosed firearm-purchase information on their website to third parties in violation of Pennsylvania statutes (WESCA …
Lim v. OpenAI Global LLC
A newsletter article summarizes a federal complaint captioned Lim v. OpenAI Global LLC filed in the Northern District of California alleging that ChatGPT web pages transmitted query-related data to Meta and Google via tracking technologies,…
Jose Torres v. SeatGeek, Inc.
This May 21, 2026 federal district-court order dismissed Jose Torres's putative class action against SeatGeek for lack of Article III standing based on alleged transmission of IP addresses and other device metadata to third-party trackers (…
L.C. v. Fertility Centers of Illinois, PLLC
The Northern District of Illinois denied a fertility clinic defendant's motion to dismiss a proposed class action alleging the clinic's website used third-party tracking technologies (Meta/Google) that disclosed patients' PII/PHI, holding t…
Shah v. Politico LLC
A federal district court in the Northern District of California issued an order on February 6, 2026, granting in part and denying in part Politico's motion to dismiss a class-action complaint alleging that Politico's website placed or trans…
Lisota v. Heartland Dental, LLC et al
The Northern District of Illinois held on January 13, 2026 that the plaintiff had standing via an analogy to intrusion upon seclusion but that her Federal Wiretap Act claim failed because the ordinary-course-of-business exception applied to…
KRISTIN COBBS; LYNNE KAWAMINAMI; LORETTA SCHWEINSBURG v. PETMED EXPRESS, INC.
The Southern District of Florida denied in part and granted in part PetMed Express’s motion to dismiss. The court found plaintiffs had Article III standing and allowed claims under the federal ECPA and California Penal Code §§ 631 and 632 t…
Javier v. Assurance IQ; D Antonio v. CNN
This Termly article explains that plaintiffs have invoked the California Invasion of Privacy Act (CIPA) against website tracking, highlighting a 2022 Ninth Circuit decision (Javier v. Assurance IQ) that treated session replay recorded befor…
Ortiz v. Foris Dax, Inc. (Crypto.com)
A federal district court in N.D. California issued a split ruling in Ortiz v. Foris Dax: it dismissed the CIPA §631 (wiretapping) claim for lack of pleaded facts about intercepted content but allowed the CIPA §638.51 (pen-register) claim to…
Doe v. Children's Hospital Corporation
The U.S. District Court for the District of Massachusetts denied Boston Children’s motion to dismiss a putative class action alleging that website tracking technologies (provided by Google and Facebook/Meta) intercepted communications in vi…
Cobbs v. PetMed Express, Inc.
This law‑firm analysis describes a surge of Florida FSCA and Wiretap Act litigation alleging website tracking technologies intercepted URLs, form inputs, and PII. It notes a shift from earlier dismissals to recent filings and some claims su…
Falls v. Blue Cross Blue Shield of Michigan Mutual Insurance Company
Miller Canfield reports that a putative class action, Falls v. Blue Cross Blue Shield of Michigan, was filed in the Eastern District of Michigan alleging that the defendant used third‑party tracking pixels and session‑replay tools that capt…
Travis Rounds v. Development Dimensions International
A federal district court in the Central District of California dismissed without leave to amend a complaint alleging that cookies and a 6Sense SDK functioned as a CIPA trap-and-trace device, finding the allegations insufficient to establish…
Shah v. Crain Communications, Inc.
Recording Law reports that on July 20, 2026 a federal judge in the Central District of California declared Vivek Shah a vexatious litigant in Shah v. Crain Communications, Inc. The court imposed a pre-filing order requiring Shah to obtain p…
Doe et al v. Veradigm, Inc.
This July 6, 2026 memorandum opinion from the U.S. District Court for the Northern District of Illinois denied Veradigm's motion to dismiss a putative class action alleging that Veradigm disclosed patients' protected health information to G…
DellaSalla et al v. Samba TV, Inc.
The Northern District of California granted in part and denied in part Samba TV’s motions to dismiss and to strike in a putative privacy class action. Several statutory claims (CIPA §§ 632, 638.5/638.51 and the Federal Wiretap Act) survived…
Allison v. PHH Mortgage
This is an amended Rule 12(b)(6) order (May 14, 2026) in Allison v. PHH Mortgage (N.D. Cal.) granting in part and denying in part PHH's motion to dismiss. Several privacy-related claims survive the pleading challenge (including CCPA, UCL, c…
Mikulsky v. Bloomingdale’s LLC
This tracker post summarizes that the Ninth Circuit reversed the dismissal of a California Penal Code § 631(a) claim challenging session-replay code on bloomingdales.com, finding the complaint alleged capture of communication contents rathe…
Dawson v. The University of Phoenix, Inc.
The district court granted in part and denied in part the University of Phoenix’s motion to dismiss in a putative class action alleging disclosure of students’ video-watching behavior via third-party tracking technologies. The decision allo…
Semien et al v. PubMatic Inc.
This January 27, 2026 district-court order in Semien v. PubMatic denied defendant’s motion to dismiss most claims at the pleading stage, allowing plaintiffs' intrusion-on-seclusion, CIPA § 631, CIPA § 638.51, and ECPA § 2511 claims to proce…
Michael Salazar, individually and on behalf of all others similarly situated v. Paramount Global, dba 247Sports
This is an amicus brief filed by the Electronic Privacy Information Center (EPIC) and technical experts/legal scholars in Supreme Court docket No. 25-459 (filed April 24, 2026). The brief argues that the Video Privacy Protection Act (18 U.S…
Kaplan v. Northwell Health, Inc.
A class action titled Kaplan v. Northwell Health, Inc. in New York State Supreme Court, Kings County, alleges that Northwell disclosed patients' PII via tracking technologies. The parties reached a settlement that the court approved by Fina…
Patrick J. Mika v. Rollins College
This is a March 11, 2026 district-court order in which the Middle District of Florida granted Rollins College's motion to dismiss the plaintiff's amended complaint as a shotgun pleading and for failure to state plausible claims. The dismiss…
Khamooshi v. Politico LLC
A federal district court in the N.D. Cal. dismissed a CIPA pen register claim against Politico for lack of Article III standing, applying the Ninth Circuit's Popa decision and finding that allegations of device/browser type and device finge…
So v. Hyatt Hotels Corp.
Plaintiff Juhyun So sued Hyatt in federal court alleging that Hyatt enabled Adobe and Meta to intercept website inputs in violation of the Federal Wiretap Act. The Northern District of Illinois granted Hyatt's motion to dismiss the second a…
Malinda A. Smidga v. Spirit Airlines, Inc.
The Third Circuit affirmed dismissal of a putative class action against Spirit Airlines for lack of Article III standing, concluding the plaintiffs’ allegations about Session Replay Code did not establish a concrete privacy injury. The cour…
Dawn Fregosa v. Mashable, Inc.
This document is a joint stipulation filed in the Northern District of California (filed February 19, 2026) in which the parties request a stay of Dawn Fregosa's suit against Mashable pending a California Court of Appeal ruling in Variety M…
Adair v. Cigna Corporate Services, LLC
A federal district court in Adair v. Cigna granted in part a motion to dismiss, concluding that plaintiffs' ECPA, WESCA, and invasion-of-privacy claims were defeated by consent in Cigna's Privacy Notice and Terms of Use, while finding plain…
In re BPS Direct, LLC; Cabela's, LLC Wiretapping Litig.
A Covington & Burling blog post summarizes the Third Circuit's May 11, 2026 decision in In re BPS Direct and Cabela's litigation on website wiretapping standing. The court held that ordinary browsing data (clicks, scrolls, searches) and the…
Mirmalek v. Los Angeles Times Communications LLC
On June 26, 2026 the Northern District of California entered a final judgment in Mirmalek v. Los Angeles Times Communications LLC granting final approval of a class action settlement. The Court ordered the parties to comply with the Settlem…
In Re: BPS Direct, LLC; Cabela’s, LLC Wiretapping Litigation
A CaseMine commentary summarizes the Third Circuit's May 11, 2026 decision in In re: BPS Direct, LLC: the court held that plaintiffs who plausibly alleged session-replay capture of complete payment-card credentials have Article III standing…
Popa v. Harriet Carter Gifts, Inc.
A Lynch Law Group article summarizes Popa v. Harriet Carter Gifts, Inc., in which a federal district court granted summary judgment for the retailer and its vendor after concluding the website's privacy disclosures and ordinary internet-use…
Shawn Delong v. PHE, Inc.
The Eastern District of Pennsylvania dismissed Delong v. PHE, Inc. (Aug. 25, 2025) without prejudice because the plaintiff failed to allege a concrete Article III injury from the defendant's use of Google Analytics on its Adam & Eve website…
In Re: USA Today Co., Inc. Internet Tracking Litigation
The Northern District of California granted USA Today's motion to dismiss, holding plaintiffs failed to allege Article III standing based on the pleaded collection of IP addresses, device type, and browser type and on unspecified 'unique an…
Austin Roth, Brandon Rose, and Alexander Fonseca v. Woot.com LLC (as a wholly owned subsidiary of Amazon.com Services LLC)
This is a class action complaint filed April 29, 2026 in the U.S. District Court for the Western District of Washington. Plaintiffs allege Woot.com deployed third‑party tracking tools (notably Meta Pixel and cookies) that captured and trans…
OLIVER v. NOOM, INC.
The U.S. District Court for the Western District of Pennsylvania granted Noom's renewed motion to dismiss because the plaintiff failed to plausibly allege a concrete Article III injury from the asserted interception by session-replay code. …
Winig v. Office of the District Attorney of Philadelphia
The Pennsylvania Supreme Court affirmed that high public official immunity shields district attorneys and assistant district attorneys from monetary-damages suits under the Wiretap Act for acts within their official duties, concluding that …
Benjamin Paul de Ayora, et al. v. Inspire Brands, Inc., et al.
This June 8, 2026 district-court order on defendants' motion to dismiss (N.D. Cal.) grants in part and denies in part the motion: the court allowed many claims to proceed at the pleading stage (including fraud, unjust enrichment, common-law…
Bianca Johnston v. Capital One Financial Corp.
The district court vacated a scheduled hearing and ordered Defendant to show cause why Plaintiff has Article III standing for a California Penal Code §631(a) claim but not for an alternative §638.51 claim, given both claims rest on the same…
Magliocca v. United Healthcare Services, Inc.
A Baird Holm LLP post reports that the U.S. District Court for the Eastern District of California dismissed a putative class action against UnitedHealthcare on March 31, 2026, finding the plaintiff failed to allege a concrete injury and thu…
Daniel Vesely v. Encyclopaedia Britannica Inc.
A class action complaint filed Sept. 9, 2025, in the US District Court for the Central District of California alleges Encyclopaedia Britannica installed third‑party trackers (including from Facebook) on its website that capture IP addresses…
Rack Room Shoes Inc. (online privacy suit)
Bloomberg Law reports that companies are adopting server-side tracking to reduce exposure to wiretap-style privacy litigation by avoiding direct third-party collection via tracking pixels. The article notes a Northern District of California…
Juhyun So v. Hyatt Hotels Corporation
A May 5, 2026 district-court memorandum opinion in the N.D. Ill. granted Hyatt's motion to dismiss a Wiretap Act-based putative class action alleging that Hyatt enabled Adobe and Meta to collect data from hyatt.com. The court found the comp…
Farst v. AutoZone, Inc. et al.
The article reports that AutoZone agreed to a class settlement in a Pennsylvania case alleging its website used session replay to record user interactions, creating a $1.23 million claims fund and paying $20 per eligible claimant. The state…
Ortiz v. Foris Dax, Inc.
This is a May 21, 2026 Northern District of California order on a Rule 12(b)(6) motion in a putative class action alleging that Crypto.com (operated by Foris Dax) deployed third-party tracking cookies after users selected ‘Disable All.’ The…
Schallert v. Palo Alto Networks, Inc.
A California Superior Court sustained Palo Alto Networks' demurrer and dismissed a complaint alleging a website SDK was a CIPA trap-and-trace device, holding that CIPA's trap-and-trace provisions are limited to telephone lines. The court di…
Variety Media, LLC v. Superior Court of the State of California
This document is an application and proposed amicus brief filed April 8, 2026 by the U.S. Chamber of Commerce in the California Court of Appeal in support of Variety Media. The Chamber argues, based on CIPA's text, structure, and context (a…
Variety Media LLC v. Superior Court
The Parker Poe client alert reports that an amended California SB 690 would remove private-party standing to sue under Penal Code section 638.51 for pen-register/trap-and-trace claims tied to websites, online applications, and mobile applic…
Sophin v. WISP, Inc.
This is the court-authorized settlement website for Sophin v. WISP, Inc., a class action pending in Broward County, Florida. The settlement resolves claims alleging that WISP disclosed customers' PII via the Meta Pixel and other tracking te…
Magenheim et al. v. Nike, Inc.
A March/April 2026 industry article reports that Salpeter Gitkin filed a proposed class action on December 16, 2025 in the Southern District of Florida (Magenheim et al. v. Nike) alleging that third-party scripts on nike.com installed code …
Desiree Perez, et al. v. Javon Hadley
A magistrate judge in the U.S. District Court for the Southern District of Florida issued a Report and Recommendations (Feb. 6, 2026) on a Rule 12(b)(6) motion: recommending denial of the motion as to federal and related privacy statutory c…
Is Your Website Creating Hidden Tracking Risk?
Scan your site for third-party tracking and potential wiretap exposure. Free, no account required.
Scan My Website