Can I get sued for a data breach?
Yes. Class actions are common in the US — especially in California (CCPA private right of action) and for healthcare (HIPAA). Expected legal costs for a small-to-mid breach are $50K-$500K. A breach handled competently rarely reaches a settlement, but legal defense costs run regardless.
Breach liability landscape (US-centric; varies by country):
**Private litigation** - Class actions are the dominant US model - CCPA grants California residents a private right of action for breaches involving non-encrypted, non-redacted personal info - Typical class-action settlements: $5-$25 per affected user - Legal defense alone: $50K-$500K pre-settlement
**Regulatory fines** - FTC: up to $50K per violation - HHS (HIPAA): tiered, up to $1.5M/year per violation category - State AGs: variable
The pragmatic answer: you probably won't get sued for a small breach handled competently. You will face significant legal costs regardless of outcome. The cheapest risk reduction is not getting breached in the first place — which is what Securie exists to do.