The Alphabet unit disclosed in 2018 that a pair of Google+ software bugs had compromised users’ names, genders, email addresses, jobs, places lived and other information, plaintiffs’ lawyers said in a motion backing the settlement. According to the motion, there was no sign that any unauthorized third party had actually accessed the data.
The second breach alone affected an estimated 10 million people, per the plaintiffs’ motion.