TikTok is facing a proposed class action lawsuit alleging that a June 2026 data breach exposed the private information of more than 2.4 billion users after the company allegedly failed to implement adequate cybersecurity measures.
What the lawsuit alleges
The complaint, Mortazi v. TikTok Inc., was filed June 11, 2026 (Case No. 2:26-cv-06371). According to the suit, it was reported on June 11 that an internal TikTok database had been compromised in a cyberattack.
The affected database is alleged to have contained unencrypted records including users':
- Names and usernames
- Email addresses and phone numbers
- Dates of birth
- Gender and language information
- Location information
The lawsuit claims cybercriminals were able to deploy malware and extract this information — something the plaintiff argues would not have happened had TikTok followed industry standards and Federal Trade Commission guidance. It warns that exposed data has significant value on illicit markets and puts users at ongoing risk of fraud and identity theft.
Who the suit seeks to represent
The proposed class covers all United States residents whose private information was compromised in the TikTok data breach reported on or around June 11, 2026.
What affected users should know
This is a newly filed lawsuit, not a settlement. The court has not decided the case, and there is no claims process or payment available yet — the allegations remain unproven, and TikTok has not been found liable.
If you're concerned your information may have been exposed:
- Watch for official notices from TikTok about the incident.
- Consider monitoring your credit and financial accounts for unusual activity.
- Be cautious of phishing emails or texts referencing a "TikTok breach" — scammers often follow high-profile incidents.
We'll update this story as the case develops.