As data breaches continue apace, so do enforcement action and litigation. This article describes a recent data breach settlement under the consumer protection statutes of 41 jurisdictions, as well as recent federal and state court judicial opinions addressing liability for data breaches under Maine and District of Columbia law.