.png)
Your personal information was exposed in a breach, along with thousands of other people's. For all of them to have a case, one person has to be named in it. Here is what that person actually does.
Reviewed by Richard P. Console Jr., Esq. · Updated July 2026
A class action representative, also called a lead plaintiff, is the one person named in a data breach lawsuit that covers everyone hit by the same breach. Your attorneys do the legal work. You answer a few written questions, share some documents, and in rare cases answer questions in person. For most people it adds up to a few hours over a year or more.
When a company loses your personal information, a single data breach lawsuit can cover everyone whose data was exposed. It gets filed in one person's name, and that person is the class action representative, also called the lead plaintiff, the named plaintiff, or simply the class representative.
Everyone else affected is a class member, and class members do not have to do anything while the case is open. The case is built around the representative's own claim, but the result covers the whole group. The representative is a class member too, so you would not be standing apart from the people you represent.
The Representative
One person, named in the case.
The Class
Everyone else exposed in the same breach.
Almost all of the work belongs to your attorneys. They write and file the lawsuit, fight the company's attempts to get it thrown out, run discovery, and negotiate any settlement. Your part is four things.
You are never expected to argue anything or know the law.
Most of these cases end in a settlement. If one goes to trial instead, the path is different and usually longer.
You are involved Nothing for you to do
A data breach class action usually runs one to three years. Your own time across all of it is normally a few hours. Most representatives never see the inside of a courtroom, because these cases settle far more often than they go to trial.
Nothing out of pocket. These cases are handled on contingency. Any attorney's fee is paid from the recovery or by the company, in an amount the court approves, and only if the case succeeds. Your attorneys advance the filing fees, records, and expert costs as the case moves along. If it does not succeed, there is no fee.
Your written fee agreement spells all of this out, and someone goes through it with you before you sign anything.
There are two kinds of compensation a data breach victim can receive, and they work differently.
The first is your share as a class member. You get the same relief as everyone else in the class, whether that is a cash payment, credit monitoring, or other benefits the settlement provides. Being the representative does not shrink it.
The second is a service award, sometimes called an incentive award. Some judges approve an extra payment for the representative to recognize the time the role takes. It is never guaranteed. The judge decides whether to grant one and how much, and some courts do not allow them at all. Federal courts in Alabama, Florida, and Georgia, for example, do not, following a 2020 appeals court decision.
Your situation has to look like everyone else's. The same breach, the same kind of information exposed, the same kind of risk. If your claim is unusual, or you have an extra issue the rest of the group does not, you may not be the right fit.
You have to be willing to look out for the whole group. The judge wants to see that you are not in it only for yourself, and that you have qualified attorneys behind you. A conflict of interest, or someone who is unwilling to take part, does not meet this test.
Lawyers call these two things typicality and adequacy. They come from Federal Rule of Civil Procedure 23.
Adequacy is rarely a hurdle for someone who was actually affected and is willing to cooperate with their attorneys.
Your name goes on the case. It is filed under your name, so it becomes part of the public court record. In practice this rarely draws attention, and for most representatives it never comes up again.
Stay in touch with your attorneys. Keep them updated if your address, phone number, or email changes, and answer when they reach out.
Console & Associates, P.C. reviews data breach claims nationwide, including the breaches we are currently investigating. In certain instances we may refer a matter to co-counsel, or work alongside co-counsel, when that is in the client's best interest. If that happens, your information is shared with those attorneys so they can work on your claim.
That arrangement does not change your responsibilities. Because co-counsel may be handling most of the day-to-day work, that firm may be the one who reaches out to you.
The representative is the named plaintiff and stands in for everyone affected by the same breach. That means answering written questions, sharing documents such as a breach notice if you received one, and in rare cases answering questions in person. The attorneys handle everything else.
No. These cases are handled on contingency, so you are not billed out of pocket. Any attorney's fee is paid from the recovery or by the defendant, in an amount the court approves, and only if the case succeeds. If it does not succeed, you owe nothing.
Most representatives never appear in a courtroom. These cases usually end in settlement rather than trial. Although it is unlikely, you may be asked to answer questions in person or over video.
Sometimes, but it is not guaranteed. Many courts approve a service award on top of what the representative recovers as a class member. But some courts do not allow service awards.
More general questions about these cases are covered in our Data Breach FAQs.