Papa John's is being sued for allegedly 'wiretapping' its own website

Papa John's pizza sign
(Image credit: Shutterstock.com / Dutchmen Photography)

Popular pizza chain Papa John’s is being sued for allegedly wiretapping its own website.

The claimant is asking for at least $100 per day of violation, per person, and given that this is a class-action lawsuit, should the company be declared guilty, the damages could amount to quite a lot.

According to the lawsuit filed earlier this week in a federal district court in southern California, Papa John’s installed what’s known as “session replay software” -  software that’s capable of recording, then replaying a user session on the website. That way, the company can see exactly where users clicked, hovered their mouse, when they decided to abandon the cart, and pretty much anything else that was part of their session with Papa John’s.

Violation of the US Wiretap Act

While this type of tracking is nothing new, and many companies use it to improve the website and its performance, Papa John’s took it too far, the plaintiffs are claiming, and in the process - violated the US Wiretap Act, as well as the California Invasion of Privacy Act (CIPA).

"The purported use of 'session replay' technology is to monitor and discover broken website features; however, the extent and detail collected by users of the technology ... far exceeds the stated purpose," the lawsuit reads.

The plaintiff is now asking for “the greater of $10,000 or $100 per day for each violation”. Furthermore, he’s demanding $2,500 in statutory damages for multiple CIPA violations. At the moment, the extent of the potential fine is unknown, but the plaintiff argues “millions” of people were unlawfully spied on. That means, if the company is found guilty, the fine could be in the millions, as well.

Papa John’s is currently silent on the matter.

Session replay software is part of the usual arsenal of every marketing and IT department and is usually used to monitor and improve the user experience. 

Via: The Register

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
Outdoor photograph of a pair of hands holding a smartphone with navigator location points in the background
Millions of phone location records feared leaked as one of the biggest data leaks ever may be a whole lot worse
This photograph shows wordmark of Siri, a digital assistant developed by Apple Inc., displayed on a smartphone
Did Siri break the law? Apple's latest privacy complaint in France doesn't bode well
In this photo illustration, the business and employment-oriented network and platform owned by Microsoft, LinkedIn, logo seen displayed on a smartphone with an Artificial intelligence (AI) chip and symbol in the background.
LinkedIn facing lawsuit over accusations private messages used to train AI
Representational image of a cybercriminal
Allstate sued for exposing personal customer information in plaintext
Law
Apple to pay $95 million after Siri “unintentionally” recorded private convos
Conceptual image with a bunch of floating eyeballs in different sizes overlooking a red computer, could symbolize ideas around malware and computer viruses
Accept all or bust: how cookie walls are creating a two-tier internet
Latest in Security
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Latest in News
Open AI
OpenAI live stream - could we see a major ChatGPT upgrade?
Apple WWDC 2025 announced
Apple just announced WWDC 2025 starts on June 9, and we'll all be watching the opening event
Hornet swings their weapon in mid air
Hollow Knight: Silksong gets new Steam metadata changes, convincing everyone and their mother that the game is finally releasing this year
OpenAI logo
OpenAI just launched a free ChatGPT bible that will help you master the AI chatbot and Sora
NetSuite EVP Evan Goldberg at SuiteConnect London 2025
"It's our job to deliver constant innovation” - NetSuite head on why it wants to be the operating system for your whole business
Monster Hunter Wilds
Monster Hunter Wilds Title Update 1 launches in early April, adding new monsters and some of the best-looking armor sets I need to add to my collection