Bujok, Jones & Smart v. MC2 Data, LLC
Dismissed Feb 6, 2025 · no class certifiedS.D. Florida · Three class actions, consolidated Nov 2024 · Filed October 2024
- Dockets
0:24-cv-61864 · 0:24-cv-61978 · 0:24-cv-62006
- Filed
Oct 7 · Oct 22 · Oct 25, 2024
- Court
S.D. Florida
- Defendant
MC2 Data, LLC
- Records exposed
106,316,633 + 2.3M subscribers
- Database size
2.2 TB
On August 7, 2024, Cybernews researchers discovered a passwordless 2.2TB MC2 Data database accessible to anyone on the internet. The exposed records included names, emails, IP addresses, encrypted passwords, partial payment information, home addresses, dates of birth, phone numbers, property records, legal records, family / relative / neighbor data, and employment history. The cause was human error (misconfigured database, no authentication) rather than a hack. Researcher JayeLTee found every user record carried a brand ID mapping to one of 15 people-search sites - CheckSecrets.com among them - with cross-brand admin accounts under @mc2data.com emails. Three class actions were filed in S.D. Florida in October 2024 alleging breach of contract and related claims, namely Bujok, Smart and Jones. The court consolidated them under Bujok on November 20, 2024, but no consolidated complaint was ever filed. After the plaintiffs gave notice of a settlement, the case was dismissed on February 6, 2025 - with prejudice as to the named plaintiffs' own claims and without prejudice as to the putative class claims. No class was certified, so there's no classwide settlement to claim from.






















