Judge tentatively OKs $725M Facebook settlement: How to apply for a payout(thehill.com)
thehill.com
Judge tentatively OKs $725M Facebook settlement: How to apply for a payout
https://thehill.com/homenews/nexstar_media_wire/3956560-judge-tentatively-oks-725m-facebook-settlement-how-to-apply-for-a-payout/
17 comments
Interestingly, some time ago as part of my job I tested this out -- how effective is a fake breach settlement website / notification as a phishing vector? It turns out, to my surprise, not very. You can't harvest anything particularly juicy beyond basic PII without arousing a lot of suspicion, and as far as vectors for harvesting basic PII, more "normal" approaches are a lot more effective.
Outside of very limited circumstances (e.g. when everyone is really angry, Hello Equifax!), the average person is remarkably uninterested in filling out data in return for an unknown amount of money, at some nebulously undefined future date, that is likely to be somewhere between $7 and $0.
Outside of very limited circumstances (e.g. when everyone is really angry, Hello Equifax!), the average person is remarkably uninterested in filling out data in return for an unknown amount of money, at some nebulously undefined future date, that is likely to be somewhere between $7 and $0.
What kind of job was this exactly?
Something similar happened to me when I went to check the balance on a prepaid visa the other day. I got redirected to a bizzare URL and an ad riddled page. I had to do a couple of takes to make sure I was at the right place.
I very much agree with this. Gmail seems to put every single class action suit email in my spam folder (probably because the domain that they come from are brand new, so understandable). Then the website always asks for a lot of personal information and sometimes bank routing numbers (!!). Maybe there could be subdomains on state gov't websites that are allocated for class action suits (tho that might still trigger spam detection)?
This one at least has the option for a prepaid gift card
FB users in USA: ~250M, if half of them end up claiming then its $6/person (before expenses, lawyer fees etc.)
In these kind of cases, only lawyers make a windfall.
In these kind of cases, only lawyers make a windfall.
Class-action lawsuits are a way to punish some entity, but not provide any meaningful restitution to victims. They just provide a way for law firms to reap the rewards of the victims abuse. The victims are even required to give up their rights to sue in exchange for the $0.05 - $5.
It's really messed up.
It's really messed up.
Yes the downside is the laywers get most of the money.
The upside is there is a big incentive for law firms to punish companies that stray from the law, which surely helps keep these companies more compliant than they otherwise would be.
The upside is there is a big incentive for law firms to punish companies that stray from the law, which surely helps keep these companies more compliant than they otherwise would be.
which surely helps keep these companies more compliant than they otherwise would be.
I really feel like these don't. This is what, a fraction of a fraction of their revenue? And it took how many years for it to get to this point? Let me know when governments have stopped being chickenshit and start threatening with substantial revenue amounts, and better yet, jail time for execs.
I really feel like these don't. This is what, a fraction of a fraction of their revenue? And it took how many years for it to get to this point? Let me know when governments have stopped being chickenshit and start threatening with substantial revenue amounts, and better yet, jail time for execs.
The $400 Illinois residents got from Facebook last time was pretty nice.
You’re forgetting the year of identity theft monitoring, a $99 value.
I signed up for the $99 identity theft monitoring and lost 10lbs.
Subscribe for more content & receive my free ebook to learn how you can start living your best life and make millions off class action lawsuits! /s
Subscribe for more content & receive my free ebook to learn how you can start living your best life and make millions off class action lawsuits! /s
Not true. Victims have the option to opt out.
And do what? Sue with expensive lawyers?
We need a better legal system. We need to end the lock hold lawyers have the system. It's entirely too expensive. Allow anyone to practice law. Ban complex judge and lawyer speak.
We need a better legal system. We need to end the lock hold lawyers have the system. It's entirely too expensive. Allow anyone to practice law. Ban complex judge and lawyer speak.
Which is even worse, because if you don't know about the law suit you get zero and you lose your right to seek legal action.
Opt-out should be the default state.
Opt-out should be the default state.
Lawsuits are indeed an interesting way of enforcing the law. Although what I find particularly egregious is when a single party and lawyer is used to enforce the law for multiple people, keeping the payout for themselves.
For instance, Albert Dytch [0] was a party to HUNDREDS of lawsuits, seeking ADA violations for places he essentially went to only with the purpose of finding something wrong to sue for. Why isn't that money distributed across the affected disabled people rather than one guy and his lawyer? The incentives are perverse.
[0] https://www.nytimes.com/2021/07/21/magazine/americans-with-d...
For instance, Albert Dytch [0] was a party to HUNDREDS of lawsuits, seeking ADA violations for places he essentially went to only with the purpose of finding something wrong to sue for. Why isn't that money distributed across the affected disabled people rather than one guy and his lawyer? The incentives are perverse.
[0] https://www.nytimes.com/2021/07/21/magazine/americans-with-d...
These kinds of cases are the only way for consumers to punish corporations, what else would you have them realistically do?
I think GP's point is that the amount of the settlement is not enough given the total number of users involved, rather than the class action itself is insignificant.
In my opinion, in these type of cases, the amount should be directly correlated to how much revenue the company generated from the sale of the data. If the sale of my data is deemed illegal/unethical/etc, then I should reap all financial benefits plus damages.
What's stopping FB from just continuing this practice and just upping their costs to their customers to include this added "cost" of doing business?
In my opinion, in these type of cases, the amount should be directly correlated to how much revenue the company generated from the sale of the data. If the sale of my data is deemed illegal/unethical/etc, then I should reap all financial benefits plus damages.
What's stopping FB from just continuing this practice and just upping their costs to their customers to include this added "cost" of doing business?
It's a good point. More hyperscale excesses would be redressed if we calculated on the greater of damages or profits.
My understanding of the current model is that if {profit} - {legal fees} > {calculated damages settlement}, there's zero incentive not to break the law.
My understanding of the current model is that if {profit} - {legal fees} > {calculated damages settlement}, there's zero incentive not to break the law.
In Facebook’s privacy case there’s also a fine and an agreement to change behavior. https://www.ftc.gov/news-events/news/press-releases/2019/07/...
Generally, class actions can include changes in behavior as part of the settlement. Class actions also pave the way for bigger class actions if the behavior isn’t changed, especially since they often negotiated by claiming to have already spent resources fixing the issue and their claims and the settlement have to pass judicial approval.
I’m not saying it’s a perfect system.
Generally, class actions can include changes in behavior as part of the settlement. Class actions also pave the way for bigger class actions if the behavior isn’t changed, especially since they often negotiated by claiming to have already spent resources fixing the issue and their claims and the settlement have to pass judicial approval.
I’m not saying it’s a perfect system.
A payout of 100 billion and then the company goes bankrupt. Or more realistically a company doing such egregious behavior would cause customers to stop using it and then lead to it drastically changing or going bankrupt.
But people constantly accept abuse and then forget about it.
But people constantly accept abuse and then forget about it.
Corporate death penalty and mandatory minimums for executives/responsible employees?
It will successfully punish facebook (the payout will happen). It just won't reward individual consumers very much.
[deleted]
>what else would you have them realistically do?
Mob justice
Mob justice
Every other country in the world has regulators that regulate for a salary rather than delegating to bounty hunter attorneys looking for a windfall.
In these kind of cases, only lawyers make a windfall.
While mostly true, I've made four figures over the last five years from these kinds of lawsuit settlements. All of them from cases of companies either violating my privacy rights, or data breaches.
I've made hundreds of dollars from Facebook alone.
While mostly true, I've made four figures over the last five years from these kinds of lawsuit settlements. All of them from cases of companies either violating my privacy rights, or data breaches.
I've made hundreds of dollars from Facebook alone.
How do you keep track of them all?
"In these kind of cases, only lawyers make a windfall."
I am starting to think this is by design. Congress is full of lawyers and they probably make laws for lawyers. If I were in charge I probably would make laws that benefit engineers.
I am starting to think this is by design. Congress is full of lawyers and they probably make laws for lawyers. If I were in charge I probably would make laws that benefit engineers.
That's exactly right. And since lawyers made the laws to ban anyone from practicing law, we get screwed .
people who got checks from the equifax data breach also got about $6 or $7 each person.
I got a $40 check from the Plaid settlement
Didn't even know Plaid had already been sued, now I feel extra justified for shitlisting Cash App the other day when they tried to get me to use Plaid in order for them to deposit money into a bank account whose details they already had and into which they had already previously successfully deposited money.
It was via using Venmo, so yeah, same situation
> That means a lot of people are eligible — Facebook reports 2 billion users globally, including about 200 million in the United States and Canada.
> Only U.S. users are eligible for a payment.
So, less than 200 million, for the record. But, that does not change the substance of your point.
> Only U.S. users are eligible for a payment.
So, less than 200 million, for the record. But, that does not change the substance of your point.
The theory is that the threat of a class action lawsuit keeps us all safer than we otherwise would be. So we benefit from all the class action lawsuits that didn't happen because companies complied with the law.
Suppose only 800,000 Facebook users end up claiming. How much would each person get then?
The site to submit claims ( https://www.facebookuserprivacysettlement.com/ ) is showing "connect.facebook.net" being blocked by Privacy Badger in my browser.
I guess I shouldn't be surprised?
I guess I shouldn't be surprised?
This seems like an elaborate scam. I never eliminated my facebook account, but I definitely stopped using them. I think the Cambridge Analytica abuse is the least of their privacy abuses.
What part of it do you believe is a scam? Seems like a standard class action suit where I might get a few dollars five years from now.
Can anybody explain to me why stealing my data and illegally getting paid for sharing it with third parties means they only have to pay me $6?
Or why fines never include at least the profit (let alone income) from illegal activities PLUS a fine?
Or why fines never include at least the profit (let alone income) from illegal activities PLUS a fine?
Because if companies that behaved badly were actually held accountable our economic system would collapse, and the people in power who benefit from it won't allow that to happen.
There’s only so hard you can slap a wrist, or it starts to hurt or something.
I think you can decline the $6 and start your own personal lawsuit for the same issue. But, IANAL.
>Only U.S. users are eligible for a payment.
This is so unfair, I want my $1-$5 damnit!
This is so unfair, I want my $1-$5 damnit!
There was one settlement in Illinois, I think it was Facebook as well, where each person who filled it out got $395.
I believe that was the biometric data lawsuit? If so, I was a member of that settlement and while the initial promise was as high as $395 (that’s what made the news), the actual checks people got were much smaller - I just found a picture of mine - $30.61
There were two checks the first one was $397 and then I think they had some left over so everyone that got the first one also got $30.61
edit: citation- https://www.chicagotribune.com/business/ct-biz-facebook-priv...
edit: citation- https://www.chicagotribune.com/business/ct-biz-facebook-priv...
There have been at least two separate Facebook settlements (so far). The most recent one was indeed $30.61. The one from a year or two ago was (edit) $397, as another poster said.
[deleted]
Yeah, that was Facebook. That was $650 million for a single state though.
[deleted]
I have submitted my data, but while doing so, I wondered if I trust these guys any more with the data. This ends up as a CSV on some lawyer's laptop Downloads folder eventually.
Then there’s another class action suit against the law firm, and so on. It’s lawyers all the way down.
725M is a rounding error. This should be every penny of revenue generated on the illegal use of data, regardless of their expense.
You don't get to rob a bank and settle for less than you took.
You don't get to rob a bank and settle for less than you took.
> You are included in this Settlement as a Settlement Class Member if you were a Facebook user in the United States between May 24, 2007, and December 22, 2022, inclusive.
If I don’t live in USA, but used Facebook on US soil, am I eligible?
Sounds like yes?
The form itself says:
> Did you reside in the United States at any time between May 24, 2007 and December 22, 2022, inclusive?
If I stayed a night, that’s “any time”???
If I don’t live in USA, but used Facebook on US soil, am I eligible?
Sounds like yes?
The form itself says:
> Did you reside in the United States at any time between May 24, 2007 and December 22, 2022, inclusive?
If I stayed a night, that’s “any time”???
IANAL - but reside generally means you established a residence there as opposed to just visited.
I mean, some people live in hotels. Or in tents. Or a sidewalk. Or in RVs. The IRS has its own rules on “residence” but that’s usually measured in hundreds of days, but here it’s “any”
The settlement form tells me I can find my username at: "Account” > “Settings and Privacy” > “General Account Settings” > “Username.”
But I don't see something called "General Account Settings" after I go to "Account > "Settings and Privacy".
I looked around, and I couldn't find my username anywhere.
But I don't see something called "General Account Settings" after I go to "Account > "Settings and Privacy".
I looked around, and I couldn't find my username anywhere.
Keeps getting
"System Currently Unavailable We apologize for the inconvenience, but the system is currently unavailable. Please try again later. Thank you."
"System Currently Unavailable We apologize for the inconvenience, but the system is currently unavailable. Please try again later. Thank you."
I want my two dollars!
https://www.youtube.com/watch?v=LdF_Vo4B6Ms
https://www.youtube.com/watch?v=LdF_Vo4B6Ms
Screw people globally but in the end only required to compensate US residents. Sounds like a good deal for Meta/Facebook.
It's an American lawsuit against an American company under American law. Of course that doesn't apply abroad.
Anyone can try filing a similar lawsuit in their local jurisdiction, but there's no guarantee that you'll win if your country's laws are different.
Anyone can try filing a similar lawsuit in their local jurisdiction, but there's no guarantee that you'll win if your country's laws are different.
This does not prevent them from being sued or fined in other countries. Probably just the first of many such cases around the world.
But the page title has a blue checkmark next to it!
>the most famous being Cambridge Analytica, a consulting firm that supported Donald Trump’s 2016 presidential campaign.
Did this read strange to anyone else? Did Trump really break people’s brains like this?
Did this read strange to anyone else? Did Trump really break people’s brains like this?
It doesn't read weird at all. The CA incident had a ton of stories about it, that's brought in so the reader goes "oh, that stuff" and knows WTF the piece is about. It's the only case of this happening that more than a very, very small proportion of readers would be aware of.
Ah, a visitor from the upside-down! Welcome, comrade. Please don't shoot me!
What about it is brain broken or incorrect?
Read the rest of his posts, he's on Earth 2
Nothing is. Its just an opportunity to work "trump made u feel bad haha" into the thread.
The whole point of supporting Trump for a lot of these people was simply the delightful thrill of having gained a pet bully that could inflict some form - any form - of grief on people they didn't like, with all the blowback going to the pet and none to themselves.
The same motivation that drives rolling coal on EVs and brandishing assault rifles in public: addiction to petty displays of imagined power over others.
The whole point of supporting Trump for a lot of these people was simply the delightful thrill of having gained a pet bully that could inflict some form - any form - of grief on people they didn't like, with all the blowback going to the pet and none to themselves.
The same motivation that drives rolling coal on EVs and brandishing assault rifles in public: addiction to petty displays of imagined power over others.
Right now we get some special web site that's like FooCompanyBarIssueSettlement.com, which is descriptive, but how do we know it's not some phishing site?
The site itself always says it's the official site and gives a case number, but there's nothing stopping a fake site from doing those things.
Right now we have to rely on it being reported in the media[1]. That's better than nothing, but why can't the courts (that approve the settlement) have a web site that links to these? Or, as a condition of the settlement, require the company (Facebook in this case) to link to it?
I know lawyers are good at law, not IT security, and I realize this is how it's typically done, but it's still a very poor practice, and it needs to change.
(In this particular case, it's also ironic because the case is about poor practices regarding data security!)
---
[1] And this one has been, including very large news outlets, so I feel pretty confident it's legitimate.