However, in order to use the platform, the plaintiff noted that "a customer must enter in significant personally identifiable information (PII) such as a first name, last name, email address, password, home address, telephone number, and payment card information." The plaintiff noted that users "trust that their PII will be maintained in a secure manner and kept from unauthorized disclosure to third parties as required by the law." According to the complaint, around November 9, there was a data breach that exposed millions of Californians' PII collected by defendants HLP and Expedia, both of whose websites were impacted. The PII was stored with defendant AWS on its Cloud Hospitality server. Moreover, the plaintiff claimed that the defendants "have not issued a disclosure" about the breach as required by law; instead, the breach allegedly was disclosed via various news sources.