Mills v. Zynga Inc. Data Breach Securities Class Action

On August 11, 2023, the U.S. District Court for the Northern District of California presided over a consolidated securities class action lawsuit, Mills v. Zynga Inc. Lead plaintiff Matthew Mills, representing a class of investors, alleged that Zynga made materially false and misleading statements by failing to disclose a massive 2019 data breach affecting over 170 million users. The complaint claimed that when the breach was revealed, Zynga's stock price dropped significantly, causing investor losses. The parties reached a proposed settlement of $10.5 million to resolve the litigation. The court issued an order concerning the final approval and the distribution of the settlement fund.

The court granted final approval of a $10.5 million settlement agreement between the plaintiff class and Zynga Inc., concluding the securities fraud claims without a trial.

Whether Zynga's delayed disclosure of the data breach constituted securities fraud, and whether the company had a duty to inform investors about the cybersecurity vulnerabilities and the breach's potential impact on its business operations and stock value.

The case reinforced the critical importance of timely and transparent cybersecurity risk disclosure for publicly traded technology companies, highlighting potential legal and financial consequences for failing to inform investors about data breaches that could materially affect business performance.