Cobbs v. PetMed Express, Inc.

Published by Crandall Consulting · Informational litigation intelligence · Last substantive update: August 23, 2026

Summary

This law‑firm analysis describes a surge of Florida FSCA and Wiretap Act litigation alleging website tracking technologies intercepted URLs, form inputs, and PII. It notes a shift from earlier dismissals to recent filings and some claims surviving motions to dismiss, highlights unresolved statutory‑interpretation questions, and recommends business mitigations (audits, consent mechanisms, data minimization).

Litigation Status

Status, direction, and weight describe how tracked public sources characterize this matter as of our last review — they are informational classifications, not legal assessments.

Procedural Posture

Article describes multiple pending matters: a nationwide class action pending in the Southern District of Florida (Cobbs v. PetMed Express), Magenheim v. Nike filed December 2025 in the Southern District of Florida, and a putative class action against a large Florida health system pending in the Middle District of Florida; some claims in these matters reportedly survived motions to dismiss.

Reported Holding

The article reports that earlier Florida FSCA suits against website trackers were routinely dismissed for not targeting the "contents" of communications, but recent filings and decisions indicate a shift: some recent FSCA and federal Wiretap Act claims against websites and tracking technologies have survived motions to dismiss and new lawsuits have been filed alleging interception of URLs, queries, and personally identifiable information.

What the Court Decided

As reported, some recent FSCA and Wiretap Act claims (including a putative class action against a health system) survived motions to dismiss, and a nationwide class action (Cobbs v. PetMed Express) and other suits were filed in federal court alleging embedded tracking technologies intercepted web activity and PII.

What the Court Did Not Decide

The article notes unresolved questions remain about the scope of "interception" and whether URLs, clicks, form inputs, and other web interactions qualify as the "contents" protected by wiretapping statutes, and whether privacy notices or cookie banners provide sufficient consent to defeat such claims.

Significance

Generally viewed as plaintiff-favorable. Characterizations of significance describe how the matter has generally been discussed in tracked public sources; individual holdings are often narrow, procedural, or fact-specific, and this page does not state or imply broader holdings than the sources support.

What This Page Does and Does Not Say

This page reports what our tracked public sources say about this matter — including, where identified, the procedural posture (for example, a ruling on a motion to dismiss is not a final merits decision). It does not report legal conclusions beyond those sources, does not predict outcomes, and does not constitute legal advice.

Technologies at Issue

• embedded tracking technologies
• pixels
• session-replay tools
• analytics scripts
• email tracking
• browser-based tracking
• Global Privacy Control (GPC) signals

Statutes Invoked

• Florida Security of Communications Act (FSCA) — all-party consent · private right of action

Claims Asserted

Claims identified in tracked public sources; pleadings may include additional or amended claims.

• Florida Security of Communications Act (FSCA) claims
• federal Wiretap Act claims

What This Matter May Mean for Website Operators

Florida Security of Communications Act (FSCA) is an all-party consent statute with a private right of action. Consent standard and private enforceability are the structural features that most shape where website tracking claims are filed and how they are valued.

For operators using similar technologies, the recurring factual questions in matters like this one are when session recording begins relative to consent and whether input masking covers every field; whether advertising pixels transmit page URLs or hashed form data before a consent choice; what page URLs and query strings analytics tools share with third parties. Our scanner tests these behaviors empirically.

Because this matter is pending, anything reported here is procedural — allegations and interim rulings, not final determinations.

Detection of a similar technology on a website is an informational risk indicator, not a legal conclusion, and nothing in this section is legal advice.

Related Intelligence

Sources

• Florida’s Digital Wiretapping Surge: What Businesses Need to Know About FSCA Litigation — Workplace Privacy, Data Management & Security Report · Tier C (Professional analysis) · 2026-01-27

About This Page

Publisher: Inspection-Ready Institute, Inc. (DBA Crandall Consulting), an independent website compliance and risk consultancy. We are not a law firm and nothing on this page is legal advice.

How this content is produced: Facts are extracted from publicly available sources — court and government materials, recognized legal press, professional analysis, and industry reports — by our litigation intelligence engine, stored with full source provenance, and rendered from the database. Risk guidelines are computed by a deterministic formula, never by an AI model directly. See the full methodology.

Limitations: Counts labeled "Tracked" reflect matters identified in our source set and are not official court statistics. We report what courts decided and did not decide; we do not predict outcomes.

Corrections: If you believe anything on this page is inaccurate, contact us via the contact page and we will review the underlying sources promptly.