Stinar Gould Grieco & Hensley, PLLC has filed the first class action lawsuit against the University of Michigan, the Regents of the University of Michigan, Matthew Weiss, and Keffer Development Services, LLC, alleging a massive breach of privacy affecting over 3,300 individuals, primarily female student-athletes.
The lawsuit, filed in the United States District Court for the Eastern District of Michigan (Case No. 2:25-cv-10806), alleges that defendants allowed unauthorized access to sensitive personal information, private photographs, and videos of thousands of student-athletes.
According to the complaint, Matthew Weiss, a former University of Michigan employee, allegedly accessed—without authorization—the social media accounts, emails, cloud storage, and personal information of thousands of female student-athletes over approximately eight years (2015-2023). The complaint alleges that Weiss targeted female athletes and downloaded private photographs and videos that were never intended to be shared beyond the plaintiffs' intimate partners.
"This case represents one of the most significant breaches of student-athlete privacy in recent memory," said Parker Stinar, lead attorney for the plaintiffs.
"Our clients placed their trust in the University of Michigan and its vendors, only to have their most personal and private information compromised due to what we allege was negligence and recklessness."
The lawsuit alleges that the University of Michigan, its Regents, and Keffer Development Services failed to implement adequate security measures, proper supervision, or employee monitoring that would have protected the plaintiffs' privacy.
According to the complaint, Weiss allegedly:
- Gained unauthorized access to student-athlete databases maintained by Keffer Development Services
- Downloaded personally identifiable information (PII) and medical data of more than 150,000 athletes
- Obtained passwords used by athletes to access computer systems
- Used this access to download private photographs and videos
The lawsuit includes claims for violations of the Computer Fraud and Abuse Act, the Stored Communications Act, Title IX, and various state laws involving invasion of privacy, negligence, and conversion.
The plaintiffs are seeking damages exceeding $100 million, along with costs, interest, and attorney fees. The class action complaint seeks to represent all persons whose personal information, images, data, social media, or videos were accessed by Weiss without authorization.
"This lawsuit is not only about seeking justice for those whose information was stolen but also about forcing the University of Michigan to confront its systemic failures and ensure such breaches never happen again. The case will hold the institution accountable for its lack of appropriate safeguards and transparency regarding the security of its student-athletes’ personal and medical data.
In the face of such violations, SGGH is committed to turning over every stone in our pursuit of justice. Through litigation, we will uncover the flaws in Michigan’s cyber security protocols that led to this massive breach, and demand real change to protect vulnerable individuals from similar harms in the future.
We will fight relentlessly to secure justice for all those affected." said Parker Stinar, lead attorney for the plaintiffs.
In the face of such violations, SGGH is committed to turning over every stone in our pursuit of justice. Through litigation, we will uncover the flaws in Michigan’s cyber security protocols that led to this massive breach, and demand real change to protect vulnerable individuals from similar harms in the future.
We will fight relentlessly to secure justice for all those affected." said Parker Stinar, lead attorney for the plaintiffs.
This case highlights the growing concern around data privacy and the security of personal information in the digital age, particularly in university settings where students entrust institutions with their personal data.
About Stinar Gould Grieco & Hensley, PLLC
About Stinar Gould Grieco & Hensley, PLLC
Stinar Gould Grieco & Hensley, PLLC is a law firm dedicated to protecting the rights of individuals in complex litigation matters. The firm has extensive experience in class action lawsuits, privacy law, and representing victims of institutional failures. Managing Partner, Parker Stinar, previously led the University of Michigan/Robert Anderson sexual abuse matter which resolved for $490 million dollars for more than 1,000 individuals. For more information, visit https://www.sgghlaw.com.
