Whitepages, one of the largest public records and people search platforms on the internet, published millions of people’s names, ages, photographs, and contact information without consent to promote and sell its subscription services. Between May 2019 and January 2022, the company displayed detailed profile pages for approximately 49,000 Illinois and Ohio residents—including minors and opt-out requests—as marketing material to drive subscription sales. This unauthorized use of personal information triggered class action lawsuits in both states, and in May 2022, U.S. District Judge Gary S.
Feinerman approved a $4 million settlement that created compensation funds for affected residents. Whitepages owns and operates a database of more than 250 million profiles aggregated from public records, directories, and other sources. The company’s primary business model relies on selling access to this data through paid subscription tiers. For years, Whitepages displayed individual profile pages prominently in Google search results—often ranking higher than social media profiles or news articles when someone searches for a person’s full name—but many consumers never consented to have their personal information published or commercialized in this way. The Illinois and Ohio settlements represent the first major legal victory against people search platforms over unauthorized use of residential data and likenesses, but they do not resolve similar allegations now moving through the courts in Colorado and potentially other states.
Table of Contents
- How Did Whitepages Use People’s Names and Photos Without Consent?
- What Settlement Amounts Are Illinois and Ohio Class Members Receiving?
- Who Is Eligible to Claim Compensation?
- What Was the Violation of State Privacy Laws?
- What Is the Credential Stuffing Data Breach from March 2026?
- What Is the Pending Colorado Telemarketing Case?
- How Can You Remove Your Profile from Whitepages?
How Did Whitepages Use People’s Names and Photos Without Consent?
Whitepages created searchable profiles containing names, ages, current and former addresses, phone numbers, lists of possible relatives, photographs, and other personal identifying information. The company then displayed these profiles publicly on its website and sold access to the detailed data through paid subscriptions. According to the lawsuits, Whitepages used this personal information to advertise its services and attract paying customers, all without obtaining explicit permission from the individuals whose data was displayed. The company’s violation was particularly significant because it published profile pages for people who had explicitly requested removal or opted out of public listings.
A Whitepages user searching for someone by name would see a clickable profile card in search results, and clicking through would display the full detailed profile—including age, relatives, and sometimes photograph. This direct commercialization of personal identity, the lawsuits argued, violated state right-of-publicity laws that protect people’s names and likenesses from being used for commercial purposes without consent. For example, a resident of Illinois whose address was on the county assessor’s website might unknowingly appear on Whitepages with a profile card visible in Google search results. If that resident’s photograph was added to the Whitepages profile (sourced from social media or other public databases), Whitepages was now using their image to market subscriptions, generating revenue from that person’s likeness without ever asking permission.
What Settlement Amounts Are Illinois and Ohio Class Members Receiving?
The $4 million settlement fund is divided between the two states based on the number of affected residents. Illinois residents who submit valid claims are estimated to receive between $125 and $245 per person, while Ohio residents can claim between $315 and $630 per person. The difference reflects the larger number of affected consumers in Illinois (approximately 24,000 consumers with primary residential addresses in Illinois) versus Ohio (approximately 25,000 in Ohio), according to the settlement administrator. Of the total $4 million, the allocation breaks down to $1,208,440 designated for Illinois class members and $2,864,200 for Ohio class members. Individual payout amounts are not fixed; they are pro-rated based on the total number of valid claims filed.
If fewer people submit claims, each valid claimant receives a larger share. If significantly more people claim, each share is reduced proportionally. This variable payout structure means early filing does not guarantee a higher individual payout—the fund is divided equally among all approved claimants regardless of when claims are submitted. It is important to note that not all people who appeared on Whitepages during the settlement period automatically qualify. The settlement defines the class as residents with “primary residential addresses” whose profile detail pages were displayed on Whitepages.com during the specific window. Vacation homes, former addresses, or profiles created without a confirmed primary residence may not meet the class definition, and claims for those profiles may be denied.
Who Is Eligible to Claim Compensation?
To qualify for the Whitepages settlement, you must meet specific criteria set by the court and settlement agreement. Your primary residential address must have been located in Illinois or Ohio between May 7, 2019 and January 27, 2022, and your profile detail page must have been displayed on Whitepages.com during that same timeframe. The settlement class includes minors and deceased individuals, so family members may file claims on behalf of minor children or deceased relatives. The settlement administrator, in this case operating through a dedicated website (whitepagesrightofpublicity.com), maintains records of profile display dates and can confirm eligibility based on address records. To file a claim, you typically need to provide your name, address during the relevant period, and a valid method of contact.
Some settlements also allow claimants to submit a sworn declaration if they believe they appeared in Whitepages but cannot locate historical proof. The deadline to submit claims is typically six months to one year after settlement approval, though this can vary—checking the settlement website directly is essential because missing the deadline forfeits compensation. Whitepages itself did not have the power to unilaterally exclude residences from profile publication. Even if you submitted removal requests or opted out through Whitepages’ own website settings, your profile could still appear in public-facing searches if the underlying data (address, name, age) came from county property records or other public sources that feed into the Whitepages database. This gap between user control and data availability is precisely what prompted the lawsuits: consumers discovered they were appearing in a commercial people search platform without any recollection of providing consent.
What Was the Violation of State Privacy Laws?
The lawsuits alleged that Whitepages violated two separate state laws: the Illinois Right of Publicity Act and the Ohio Revised Code § 2741.01. These laws protect individuals from having their names, likenesses, and personal characteristics used for commercial purposes without consent. Unlike privacy statutes that focus on data collection and use, right-of-publicity laws prevent the commercial exploitation of a person’s identity itself—whether that identity is their name, face, voice, or other distinguishing attributes. Illinois law specifically prohibits using a person’s name or likeness in connection with advertising, sales, or promotion without written consent. Ohio’s statute similarly restricts the use of a person’s name, image, or likeness for commercial purposes.
Whitepages’ business model—aggregating personal data and selling access to it through subscriptions—directly fell under these protections. The defendant argued that using publicly available data does not require consent, but the courts disagreed, finding that public availability of raw data (a name in a property record) does not automatically grant permission to republish that data in a commercial product designed to profit from that person’s identity. The settlement did not require Whitepages to admit wrongdoing—as is typical in class action settlements. However, the $4 million payment and agreement to modify certain practices acknowledged the strength of the plaintiffs’ legal claims. Going forward, Whitepages agreed to implement additional data removal procedures for residents who request opt-out, though the company continues to operate its people search business with substantial profile databases intact.
What Is the Credential Stuffing Data Breach from March 2026?
In addition to the privacy litigation over unauthorized profile publication, Whitepages suffered a separate data breach discovered on March 24, 2026, when the company’s security team detected an unusual spike in login attempts. The breach was caused by credential stuffing—attackers using usernames and passwords stolen from unrelated third-party services (not Whitepages itself) to gain unauthorized access to Whitepages accounts. The credential stuffing technique exploits the fact that many people reuse the same password across multiple websites, so data breaches at other companies provide usable passwords for Whitepages and similar platforms. The compromised data included account names, email addresses, lookup history, order history, and partial payment card information (last four digits and card type only; full card numbers were not exposed). Whitepages notified affected users by letter on March 27, 2026, and reported the incident to the California Attorney General on March 31, 2026.
The company did not publicly disclose the total number of impacted users, which is a limitation in assessing the breach’s scope. Subscribers with saved payment methods were most at risk, as attackers could use stored account access to view previous searches or place new people search requests. This breach underscores a practical concern for Whitepages users: providing personal data to the platform creates a target for attackers. Even if Whitepages implements robust security measures, credentials stolen from other websites can still unlock accounts. The company offered no free credit monitoring or identity theft protection in the public disclosures, leaving affected users responsible for their own monitoring and fraud protection measures.
What Is the Pending Colorado Telemarketing Case?
On April 21, 2026, U.S. District Judge Tana Lin denied Whitepages’ motion to strike class allegations in a Colorado lawsuit, allowing the case to proceed as a potential class action. The Colorado case focuses on a different legal theory than the Illinois and Ohio settlements: violations of Colorado’s Prevent the Scams Act (PTFA), which regulates telemarketing and unsolicited contact.
The allegation is that Whitepages maintained a policy of publishing consumers’ cellphone numbers in its commercial directory without first obtaining consent, making those numbers available to telemarketers and scammers. Unlike the Illinois and Ohio cases, which centered on right-of-publicity violations from using names and images in marketing, the Colorado case targets the publication of cellphone numbers specifically—data that directly facilitates harassment and unwanted calls. The judge’s April 2026 ruling means the case survived an early motion to dismiss, and discovery and settlement discussions can now proceed. This ruling suggests that other states with similar telemarketing protection statutes could file similar claims if Whitepages continued publishing cell numbers without consent after the Colorado ruling.
How Can You Remove Your Profile from Whitepages?
Whitepages provides an online removal process, though the effectiveness and permanence of removal vary. Visiting Whitepages.com allows you to search for your own name, locate your profile, and click a removal or opt-out option. The company typically processes removal requests within a few business days, and your profile should no longer appear in public searches on Whitepages or through aggregator sites that pull Whitepages data. However, removal is not necessarily permanent—if updated information is later added to public records (such as a new address on a property deed or voter registration), Whitepages may re-add your profile automatically.
Additionally, removing your profile from Whitepages does not prevent your information from appearing on other people search platforms (Spokeo, BeenVerified, TrustReport, and dozens of others operate independently). Each platform requires separate removal requests. Some data brokers honor removals more reliably than others, and some will re-add your profile if you fail to re-confirm removal annually. For maximum privacy, most privacy advocates recommend submitting removal requests to multiple platforms on an ongoing basis, keeping records of submission dates and following up if your profile reappears.
- —