The owners of the Ashley Madison cheating-dating website have agreed to pay $11.2 million to settle two dozen data breach lawsuits as a result of a 2015 incident involving as many as 37 million members’ personal identifying information being exposed online. The deal (PDF) earmarks up to one-third, or about $3.7 million, for attorneys’ fees and costs.
An additional $500,000 has been set aside to administer the remaining $7 million earmarked for Ashley Madison members.
The breach and the lawsuits highlight the site’s poor security and deceptive business practices, which have also resulted in a $1.6 million settlement with the Federal Trade Commission and several states.
A Missouri federal judge must sign off on the latest deal, which was submitted in federal court Friday.
Under its terms, members who submit a “Valid Claim form and Reasonable Documentation” will be refunded their $19 if they had purchased the $19 “Full Delete” feature. Members who paid that fee were supposed to have their data deleted from the site’s servers, but it wasn’t—such data was infamously exposed in the hack.
Read 6 remaining paragraphs