Current and former Redfin workers notified of a 2026 data breach may be covered by proposed class actions alleging Redfin and its parent, Rocket, failed to protect their names, Social Security numbers, driver’s license numbers and financial account information. No class has been certified and there is nothing to file yet.
Allegations Only · No Settlement Yet
This article describes class action complaints. The statements below are unproven allegations. Redfin and Rocket have not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.
What Is This About?
Five proposed class actions filed in the U.S. District Court for the Western District of Washington between September 28 and October 16, 2026 accuse Redfin Corporation and its parent company, Rocket Companies, of failing to protect sensitive information about the people who worked for Redfin. The first, Rolland v. Redfin Corporation, No. 2:26-cv-03648, was filed September 28, four days after Redfin filed a notice of a security incident with the Massachusetts Office of Consumer Affairs and Business Regulation, according to the complaint.The complaints allege that names, Social Security numbers, driver’s license numbers and financial account information were exposed. No judge has ruled on the allegations.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Happened?
Redfin has said little publicly about the incident. According to The Seattle Times, the company said it identified suspicious activity involving a single employee account in early March 2026, notified people who may have been affected and offered them two years of free credit monitoring. The Rolland complaint says Redfin filed its Massachusetts notice on September 24, 2026, about six months after that discovery.The plaintiffs allege that Redfin has not explained when the breach happened, how long an intruder had access, how it occurred or exactly what was taken, and that the delay kept employees from protecting themselves sooner. Redfin told The Seattle Times its systems were reviewed and confirmed secure and that it is confident it will prevail once all the facts are presented. Rocket referred questions to Redfin. No total count of affected people has been published.
Who Is Suing, and Who Would Be Covered?
The plaintiffs include former Redfin employees. One former employee who worked at Redfin from September 2020 to November 2022 says she has since experienced fraud, financial losses and a large increase in spam, according to The Seattle Times. The Rolland complaint says its plaintiff gave Redfin her information as a condition of employment or professional placement services, and that she has spent time monitoring her accounts and has received more spam and scam messages since the breach.The proposed class in the Rolland complaint is everyone who was impacted by the data breach and received a notice from Redfin. The Moreno complaint, filed October 14, proposes a class of U.S. employees whose information was compromised, according to The Seattle Times. These definitions are proposals; the court has not certified any class.
What Do the Lawsuits Claim?
The Rolland complaint brings four claims against both companies: negligence, unjust enrichment, breach of implied contract, and violation of the Washington Consumer Protection Act. It asks the court to certify a class and award damages, statutory or enhanced damages where available, restitution, injunctive relief, and attorneys’ fees and costs.The five cases are:
- Rolland v. Redfin Corporation, No. 2:26-cv-03648, filed September 28, 2026
- Marshall v. Redfin Corporation, No. 2:26-cv-03651, filed September 28, 2026
- Johnson v. Redfin Corporation, No. 2:26-cv-03670, filed September 29, 2026
- Moreno v. Redfin Corporation, No. 2:26-cv-03915, filed October 14, 2026
- Titarchuk v. Redfin Corporation, No. 2:26-cv-03960, filed October 16, 2026
The plaintiffs in the earlier cases filed notices of related cases. The first-filed Rolland case is before U.S. District Judge James L. Robart, and the Johnson case has been reassigned to him.
What Happens Next?
Related data breach suits filed in the same court are commonly consolidated into a single case with one amended complaint, after which the defendants respond, often with a motion to dismiss. None of that had happened as of October 19, 2026. There is no settlement, no fund and nothing to file. If the cases settle, notice would go to the people on Redfin’s notification list, and this page will be updated.Questions
Were Redfin home buyers and sellers affected?
The lawsuits describe the people affected as employees, and one also refers to people who gave Redfin their information to receive professional placement services. None of the complaints reviewed says customer accounts were involved, and Redfin has not published a count or a description of who was notified.
What has Redfin said about the breach?
According to The Seattle Times, Redfin said it identified suspicious activity involving a single employee account in early March 2026, that its systems were reviewed and confirmed secure, and that it is confident it will prevail in the litigation once all the facts are presented. Rocket referred questions to Redfin.
Why are there five separate Redfin lawsuits?
Each was filed separately on behalf of a different plaintiff. All five are in the same Seattle federal court, the earlier plaintiffs filed notices identifying the cases as related, and the first-filed case is before Judge James L. Robart. Related data breach suits are often consolidated into one case with a single amended complaint.
Did Redfin offer credit monitoring?
The Seattle Times reported that Redfin notified potentially affected people and offered two years of free credit monitoring. Enrollment details are in the notice letters, which have not been published.
Sources
- Class action complaint, Rolland v. Redfin Corporation, No. 2:26-cv-03648 (W.D. Wash. filed Sept. 28, 2026), ECF No. 1, via the CourtListener docket.
- Dockets for the related cases on CourtListener: Marshall, Johnson, Moreno and Titarchuk.
- Redfin, Rocket hit with lawsuit over alleged breach of employee data (The Seattle Times, via The Spokesman-Review, Oct. 16, 2026).
