People notified that their Social Security numbers may have been exposed in the June–September 2026 Waste Management data breach may be covered by a proposed class action alleging USA Waste-Management Resources failed to adequately protect their personal information. No class has been certified and there is nothing to file yet.
Allegations Only · No Settlement Yet
This article describes a class action complaint. The statements below are unproven allegations. USA Waste-Management Resources, LLC has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.
What Is This About?
USA Waste-Management Resources, LLC, part of the Houston-based trash and recycling company WM, was sued on November 13, 2026, in a proposed class action in the U.S. District Court for the Southern District of Texas, White v. USA Waste-Management Resources, LLC, No. 4:26-cv-09983. The suit was filed a week after Waste Management reported a data breach to the California Attorney General. The plaintiff, a former Waste Management employee from Alabama, alleges that the company failed to properly secure the names and Social Security numbers stored on its systems.The complaint alleges that Waste Management could have prevented the breach by training employees to resist social engineering, using multi-factor authentication and access controls, and encrypting its data, and that it waited more than two months after learning of the breach to notify people. It asserts claims for negligence, breach of implied contract, breach of the implied covenant of good faith and fair dealing, and unjust enrichment, and asks for damages, restitution and court-ordered security changes. These are allegations; Waste Management has not yet responded in court and no judge has ruled.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Did Waste Management Report?
Waste Management’s notice letter, dated November 6, 2026 and filed with the California Attorney General the same day, says the company became aware of a potential issue with a limited portion of its information systems on September 2, 2026. Its investigation found that an unauthorized party used sophisticated social engineering tactics to access data between June 17 and September 3, 2026, and on October 6, 2026, the company determined that sensitive personal information, including Social Security numbers, may have been affected.Waste Management is offering 24 months of free credit monitoring and identity protection through Cyberscout, a TransUnion company. The letter says recipients must enroll within 90 days of the letter’s date using the activation code it contains. The company has not publicly said how many people were notified; the complaint estimates the number at hundreds of thousands, without citing a source.
Who Is Affected?
The people affected are those who received Waste Management’s notice letter. The letter is signed by the company’s chief human resources officer, and the plaintiff says his information was collected as a condition of his employment, which suggests current and former employees are among those notified; the letter itself does not say who the recipients are. The complaint proposes a nationwide class of everyone in the United States whose information was exposed in the breach.The complaint also points to an earlier incident: it says a January 2021 breach compromised information of more than 268,000 current and former Waste Management employees and led to a federal class action in New York. The California Attorney General’s breach list shows that report as well, with January 2021 breach dates.
What Happens Next?
The case is at its earliest stage. Waste Management will be served and will respond, which in data breach cases often means a motion to dismiss. If other suits are filed over the same breach, they are often combined before one judge with a consolidated complaint. Any payment would come only from a later settlement or judgment approved by the court; there is no claim form, settlement or deadline now. The free credit monitoring in the company’s letter is separate from the lawsuit and has its own 90-day enrollment window.Questions
Who received the Waste Management data breach notice?
Waste Management’s November 6, 2026 letter, signed by its chief human resources officer, says it went to people whose sensitive personal information, including Social Security numbers, may have been affected. The letter does not say how many people were notified. The plaintiff in the first lawsuit is a former Waste Management employee, and the complaint says the information was collected in connection with employment or other dealings with the company.
Is there a Waste Management data breach settlement?
No. The lawsuit was filed November 13, 2026, no class has been certified and there is no settlement, claim form or deadline. Waste Management is offering 24 months of free credit monitoring and identity protection through Cyberscout to people who received its letter, with enrollment open for 90 days from the letter’s date.
Has Waste Management had a data breach before?
The new complaint says yes. It cites a January 2021 incident that it says affected more than 268,000 current and former employees and led to class action litigation in federal court in New York, In re Waste Management Data Breach Litigation, No. 1:21-cv-06199. The California Attorney General’s breach list also shows an earlier USA Waste-Management Resources report with January 2021 breach dates.
What does the Waste Management lawsuit claim?
The complaint, White v. USA Waste-Management Resources, LLC, alleges that Waste Management failed to use reasonable security, such as employee training against social engineering and multi-factor authentication, and waited more than two months to notify people. It asserts negligence, breach of implied contract, breach of the implied covenant of good faith and fair dealing, and unjust enrichment, and seeks damages and court-ordered security improvements. These are allegations; Waste Management has not responded in court.
Sources
- California Attorney General: USA Waste-Management Resources, LLC breach report (breach date June 17, 2026; reported November 6, 2026), including the company’s notice letter
- Class Action Complaint and docket, White v. USA Waste-Management Resources, LLC, No. 4:26-cv-09983 (S.D. Tex., filed Nov. 13, 2026)
