Workday, Salesforce class action claims companies failed to protect consumer data

A new class action lawsuit has been filed against Workday Inc. and Salesforce Inc., alleging their responsibility for a 2025 data breach that exposed the personal information of millions of consumers. Plaintiffs Juan Elias and Saroj Panigrahy claim the companies failed to implement fundamental security measures, leading to the unauthorized access of sensitive PII, despite Salesforce warning its customers about the specific type of attack used. The lawsuit accuses Workday and Salesforce of negligence, breach of implied contract, unjust enrichment, and violations of California’s Consumer Privacy Act and Unfair Competition Law.