Lime Crime customers whose sensitive data may have been exposed in a data breach can now qualify for cash payments and discounts from a $110,000 class action settlement.

Lime Crime sells cosmetics through a retail website, using credit and debit card information to accept payments.

This Lime Crime class action lawsuit was filed in January 2016 by nine Lime Crime online customers who claim Lime Crime allowed their personal and credit information to be exposed.

According to the plaintiffs, Lime Crime discovered a security breach in February 2015 that exposed sensitive credit information of an unknown number of customers.

The breach was active between Oct. 4, 2014 and Feb. 15, 2015. Customers’ names, addresses, credit and debit card account numbers, expiration dates, security codes, and their LimeCrime.com usernames and passwords were allegedly exposed.







Although Lime Crime says it discovered the breach in February 2015, plaintiffs allege the company was on notice of the breach as early as November 2014. They further claim Lime Crime attempted to suppress early reports of the breach by consumers.

The plaintiffs say the breach could have been avoided had Lime Crime complied with reasonable security standards. By failing to take commercially reasonable steps to protect its customers’ data, Lime Crime allowed the data breach to take place, the plaintiffs claim.

After mediation sessions with a retired judge and continuous negotiations between counsel, the parties agreed to this Lime Crime class action settlement. The settlement requires Lime Crime to create a settlement fund worth $110,000. This fund will be distributed among qualifying Class Members who submit valid and timely claims.

Class Members will also receive a 15 percent discount on a future Lime Crime purchase.

In addition, Lime Crime has agreed to implement several changes designed to improve its handling of customer financial information. The company will appoint a new Chief Information Security Officer, perform a risk assessment, improve the ways its customers’ information is stored, and develop procedures for selecting and maintaining outside data service providers.







Lime Crime maintains that its actions were lawful at all times and does not admit liability by agreeing to this settlement.

Class Members can exclude themselves from the settlement or object to its terms by filing a written request no later than Feb. 22, 2018.