Mc2 Data Class Action – Best Proven Guide (2026)

An mc2 data class action has been filed in federal court in Florida, and this article explains — in plain language — what the litigation alleges, who might fall within the proposed class, and what an affected person can reasonably do right now. The information below about the lawsuits comes from publicly available federal court dockets, verified today. Nothing here is legal advice, and no settlement, fund, or claims process exists in these cases at this time.

What is the mc2 data class action?

MC2 Data, LLC is a data broker that operates consumer background-check websites, compiling profiles from public and commercial records. In September 2024, security researchers reported that a large MC2 Data database had been left accessible online without a password. Lawsuits followed. Court records show three verified federal filings against the company — that is the exact number confirmed on the dockets, no more and no fewer.

The three verified filings

All three cases were filed in the U.S. District Court for the Southern District of Florida (flsd). They are: Bujok v. MC2 Data, LLC, filed October 7, 2024; Jones v. MC2 DATA, LLC, filed October 22, 2024; and Smart v. MC2 Data LLC, filed October 25, 2024. The Smart docket records a nature-of-suit code of 360, “P.I.: Other,” a general civil category. The docket entries for Jones and Bujok do not record a case type.

You can read the official court record for one of these matters directly on CourtListener: Smart v. MC2 Data LLC, S.D. Fla.. CourtListener republishes filings drawn from the federal judiciary’s PACER system, so it reflects what the court itself has on file rather than a summary written by an interested party.

What the mc2 data class action alleges

A class action is a single lawsuit brought by one or more named individuals on behalf of a larger group of people said to have been harmed the same way. At the core of the mc2 data class action is the claim that MC2 Data held large volumes of sensitive personal information and failed to protect it adequately, allowing that information to become exposed. Because the cases are at an early stage, the specific legal theories in each complaint have not been tested or ruled on by the court.

Importantly, allegations are not findings. Filing a complaint means a plaintiff has stated a claim — it does not mean a judge has agreed with it. MC2 Data has not been found liable by any court in these matters, and the company is entitled to contest every allegation.

Background: the underlying data exposure

The reported incident that preceded these filings became public in September 2024. Security researchers described a roughly 2.2 TB database, containing on the order of 100 million-plus records, that was reachable without authentication. Reported record fields included names, addresses, dates of birth, phone numbers, email addresses, employment history, and property and legal records, along with information tied to subscriber accounts.

For independent reporting on the exposure itself — separate from the litigation — see Infosecurity Magazine’s coverage of the MC2 Data exposure. Details in press reporting are not the same as facts established in court, and the two should be kept separate when evaluating the mc2 data class action.

Who may be in the proposed class?

Class definitions are written in the complaints and must ultimately be approved by the judge. Broadly, the people potentially covered by an mc2 data class action of this type are U.S. individuals whose personal information was held by MC2 Data and involved in the reported exposure. That group can include people who never used an MC2 Data website, because data brokers gather records about individuals who are not their customers.

It may also include subscribers to MC2 Data’s background-check services whose account information was implicated. Until the court rules on class certification, no one should assume they are or are not a class member. The scope is genuinely undecided.

What someone affected should do now

The single most useful step is recordkeeping. Keep any notice you received, screenshots of suspicious activity, and dated notes of time you spent responding. Save receipts for out-of-pocket costs such as credit monitoring or replacement documents. Documentation created contemporaneously is far more useful later than a reconstruction from memory.

Second, take ordinary protective measures independent of the mc2 data class action: review credit reports from all three bureaus, consider a credit freeze or fraud alert, watch financial statements, and be alert to phishing that uses accurate personal details to appear legitimate. The U.S. Federal Trade Commission maintains free, government-run guidance at IdentityTheft.gov.

Deadlines exist, and they vary

Every legal claim is subject to a filing deadline, generally called a statute of limitations. Those deadlines differ by state, by the type of claim, and by when the harm was or should have been discovered. Some are short. Missing one can end a claim permanently regardless of its merits. This article cannot tell you what deadline applies to you — that depends on facts specific to your situation and your state.

If deadlines matter to you, the appropriate move is to consult a licensed attorney in your jurisdiction promptly rather than waiting to see how the mc2 data class action develops. Class members generally do not need to file individually while a case is pending, but the rules around tolling are technical.

Current status: early, and no settlement

To be explicit: there is no settlement in the mc2 data class action. There is no settlement amount, no approved fund, no claim form, and no payment deadline. Anyone contacting you with a claim number, a payout figure, or a request for payment or banking details in connection with these cases should be treated with suspicion — settlement-scam messages commonly follow publicized data incidents.

The three verified filings date from October 2024 and remain in the early phases of federal civil litigation. Cases at this stage typically involve procedural motions, possible consolidation of related suits, and briefing on whether the claims may proceed. Outcomes at this point are unknown; the litigation may be certified, narrowed, dismissed, or resolved.

How to follow the mc2 data class action yourself

The dockets are public. Anyone can monitor the CourtListener pages for Smart, Jones, and Bujok to see new filings and orders as they are entered, without relying on secondhand accounts. Reading the docket directly is the most reliable way to know the real status of the mc2 data class action at any given moment.

This article is general legal information, not legal advice, and reading it creates no attorney-client relationship. For guidance about your own circumstances, speak with a qualified lawyer licensed in your state.

Were You Injured by a Recalled Product?

A recall by itself is a safety action, not a legal claim. However, if a recalled product caused a real injury, you may be eligible to pursue compensation. A licensed attorney can review your situation at no upfront cost — most work on contingency, meaning you pay nothing unless you recover.

Official Sources & Resources

Verify every recall against the issuing agency before acting:

• the issuing agency: official recall database — the record of truth for this notice
• CPSC: cpsc.gov — household goods, toys, furniture, appliances
• FDA: fda.gov — food, drugs, and medical devices
• NHTSA: nhtsa.gov — vehicles, tires, and child car seats
• USDA FSIS: fsis.usda.gov — meat, poultry, and egg products

Content last reviewed July 2026. This is general educational information, not legal advice. If you notice outdated information, please contact us.

Related Guides

• All Product Recalls
• All Active MDL Cases
• Mass Tort Explainers
• Mass Tort Tips
• Tort Reform by State — 50-State Comparison

Attorney Advertising. The information on this page is provided for general informational purposes only and does not constitute legal advice. A product recall is a safety action by a manufacturer or regulator and does not by itself establish liability or create a legal claim. No attorney-client relationship is created by accessing or using this content. Every case is unique. If you believe you were harmed by a recalled product, consult a licensed attorney in your jurisdiction.