The X (formerly Twitter) Data Sharing class action lawsuit remains in active litigation as of mid-2026 and has not yet resulted in a finalized settlement where individual class members can file claims. The case, Yeh v. Twitter, Inc., was originally filed in March 2023 in San Francisco County Superior Court (later moved to federal court) and alleges that Twitter collected user phone numbers and email addresses under the pretense of account security but actually used this data for targeted advertising without proper disclosure.
Although no class action settlement has been finalized, understanding the allegations, the documented data practices at issue, and the status of the litigation is critical for users who believe their data was misused during the claimed period. The core allegation centers on a specific practice spanning May 2013 through September 2019, when Twitter reportedly collected sensitive contact information from millions of users through security features like two-factor authentication and password recovery—then repurposed that data for advertising targeting without adequate notice. A federal judge has already rejected Twitter’s motion to dismiss the case, meaning the litigation will proceed toward potential settlement negotiations or trial.
Table of Contents
- What Claims Are Being Alleged in the Yeh v. Twitter Litigation?
- Who Would Be Eligible to Claim if the Case Settles?
- What Would Documentation or Proof Requirements Likely Be?
- What Are the Key Dates to Watch?
- How Does This Compare to the FTC Settlement That Already Occurred?
- What Warnings Should Users Be Aware Of?
- Where to Find Official Updates on This Case
What Claims Are Being Alleged in the Yeh v. Twitter Litigation?
The lawsuit alleges that twitter engaged in deceptive data practices by collecting phone numbers and email addresses under a security justification while secretly using this information to enable targeted advertising. Between May 2013 and September 2019, when users opted into two-factor authentication or used password recovery features, they were told this data would protect their accounts—not build advertising profiles. According to the complaint, Twitter then used these verified contact details to match and segment users for targeted ads, generating advertising revenue without user consent or clear disclosure. This allegation is supported by documented regulatory action.
In May 2022, the Federal Trade Commission and Department of Justice reached a settlement with Twitter for $150 million based on identical findings—that Twitter deceptively collected security-related data and repurposed it for advertising. The FTC settlement is finalized and represents the government’s official finding that these practices violated consumer protection law. However, that regulatory settlement does not provide compensation to individual affected users; the $150 million went to government agencies as a civil penalty and to fund Twitter’s compliance program. The class action lawsuit seeks to provide direct compensation to individual consumers whose data was misused. The judge’s denial of Twitter’s motion to dismiss means the case has survived the initial hurdle and will proceed through discovery and toward potential settlement negotiations.
Who Would Be Eligible to Claim if the Case Settles?
Eligibility for any future settlement will likely be tied to the specific time period alleged in the complaint: May 2013 through September 2019. Users who had Twitter accounts during this window and provided phone numbers or email addresses through the platform’s security features (such as enabling two-factor authentication, setting up password recovery, or adding contact information for account recovery) would potentially qualify as class members.
However, one significant limitation is that Twitter/X has no obligation to notify users about this litigation or any eventual settlement unless and until a settlement is actually approved by a court. Unlike settled class actions where settlement administrators typically send claim forms directly to class members’ email addresses or by mail, users in ongoing litigation may not receive official notice unless they actively monitor the case. This means many affected users could miss claim deadlines simply because they were never notified that a settlement existed.
What Would Documentation or Proof Requirements Likely Be?
For any eventual settlement, class members would typically need to provide proof of membership in the class—that is, evidence they had a Twitter account during the relevant period and that they provided contact information through the platform. The exact documentation required would be specified in any settlement agreement and claim procedures, but common requirements in similar data misuse settlements include: Providing a Twitter username or account email address that was active between May 2013 and September 2019, and demonstrating that the account was linked to the phone number or email address at issue.
Some settlements allow claimants to simply attest to these facts under penalty of perjury without requiring receipts or screenshots, while others require more extensive documentation. In the Twitter/X case, the company’s own records could theoretically confirm which accounts had security features enabled and which contact data was stored, so a settlement might allow for claim verification through X’s own systems rather than requiring users to produce personal documentation.
What Are the Key Dates to Watch?
As of July 2026, the litigation is still active with no settlement deadline announced. The case is pending in the U.S. District Court for the Northern District of California (Case No. 3:23-cv-01790-HSG).
The typical timeline for class action settlement is months or years after the initial filing—discovery (exchanging evidence) usually takes 12-24 months, settlement negotiations occur in parallel, and then a settlement agreement must be proposed to the court for preliminary approval before claim notices can be sent to class members. No official settlement website or claim portal exists yet because no settlement has been finalized. If and when a settlement is reached, the court will issue a preliminary approval order, and a claims administrator will be appointed to manage the process. That administrator will establish a deadline for claims (typically 60-180 days from when claim notices are first mailed or emailed to class members), and all claims must be received by that deadline to receive compensation. Users who miss the deadline forfeit their right to claim.
How Does This Compare to the FTC Settlement That Already Occurred?
It is critical to distinguish between two separate actions against Twitter/X: the FTC regulatory settlement from May 2022, and the pending class action lawsuit. The FTC settlement is closed and finalized—it resulted in a $150 million civil penalty paid by Twitter to the federal government and a mandate that X implement comprehensive privacy safeguards going forward. However, this settlement provided no direct payments to individual consumers.
The class action lawsuit seeks to provide direct compensation to the millions of individual users whose data was misused. If it settles, affected users would receive payments from a settlement fund, not from the government. The amount each person receives would depend on how the settlement fund is divided—typically either equally among all class members, or based on the extent of data misuse (e.g., how long the phone number or email was used for advertising). In a settlement covering millions of users over a 6-year period, individual payouts could range from less than $1 per person to $10-$50 per person, depending on the total settlement amount and number of claims filed.
What Warnings Should Users Be Aware Of?
One critical warning: fraudulent websites and scams have historically emerged around high-profile class action settlements, especially data privacy cases. If and when the Twitter/X settlement is finalized, users should only file claims through the official settlement administrator’s website (which will be clearly linked from court documents and legitimate legal news sources). Never pay upfront fees to claim—class action claims are always free to file.
Any website demanding payment or requesting passwords for X/Twitter accounts is a scam. Additionally, users should not trust third-party services claiming to file claims “on their behalf” unless they charge only a percentage of the recovery (and only if they are court-approved claims administrators). Legitimate class action settlements are free to join; anyone charging a flat fee upfront is running a scam.
Where to Find Official Updates on This Case
Official case updates can be found through PACER (Public Access to Court Electronic Records), the federal court’s online system, by searching for Case No. 3:23-cv-01790-HSG in the Northern District of California. This system shows all court filings, motions, and orders.
Registered PACER users can create an email alert for this case to receive notifications when new documents are filed—allowing users to stay informed without having to check manually. Users can also monitor the case through legal news outlets that cover class action litigation. Court announcements regarding settlement approval, if it occurs, will be published in press releases and legal news before any claim notice is sent to class members. However, the most reliable source remains PACER itself, where the official settlement agreement and claim procedures will be posted if a settlement is reached and approved by the judge.
- —