A milestone has been reached with the announcement of the first settlement for a California Consumer Privacy Act (CCPA) class action. The parties in the lawsuit against Hanna Andersson, a retailer of high end children's apparel, reached an agreement last month to settle the case for $400,000.

The case originates from a data breach that occurred in November of last year. Hackers accessed the third party e-commerce platform that the retailer uses, giving them access to the names, shipping and billing addresses, and payment card information for more than 200,000 customers. The hackers used this information to make fraudulent purchases with some customers' payment card info.

The plaintiffs brought suit for this breach under the California Unfair Competition Law, Virginia Personal Information Breach Notification Act, and the CCPA. It was one of the first class actions to be filed under California's landmark data privacy law, which was signed into law in June of 2018 and took effect on January 1, 2020.