Vulnerability Management, Privacy, Data Security

Google resolves data leak suit with $350M settlement

Google has agreed to pay $350 million to resolve a shareholders lawsuit from 2018 concerning a vulnerability in its discontinued Google Plus platform, which resulted in third-party exposure of data belonging to millions of users, reports The Record, a news site by cybersecurity firm Recorded Future. Such a breach compromised individuals' full names, birthdates, gender, email and home addresses, profile pictures, occupations, and relationship status, according to a 2018 report from The Wall Street Journal, which noted that the security issue was only remediated in March of the same year despite beginning three years prior. Google was also noted by The Journal of having its senior executives advised not to publicly disclose the data exposure, a plan which was also known by Google CEO Sundar Pichai. "We regularly identify and fix software issues, disclose information about them, and take these issues seriously. This matter concerns a product that no longer exists and we are pleased to have it resolved," said Google spokesperson Jose Castaneda.

You can skip this ad in 5 seconds