What Is the TurboTax Lawsuit?
The TurboTax lawsuit is a group of separate legal and regulatory actions against Intuit Inc., not one single case, brought over deceptive advertising for TurboTax's 'free' filing product, a 2024 data breach affecting TurboTax and Credit Karma customers, and, in earlier matters, fraudulent tax returns filed through the platform.
The multistate settlement (all 50 states and the District of Columbia, led by New York Attorney General Letitia James) resolved allegations that Intuit's 'Free, Free, Free' and 'AbsoluteZero' ad campaigns misled roughly two-thirds of taxpayers who were never actually eligible for the free product. Separately, the FTC brought its own administrative case (Docket No. 9408) over the same advertising, reaching a cease-and-desist order that the Fifth Circuit vacated in March 2026 on constitutional grounds, sending the underlying dispute to federal court instead. A third, currently active matter is a data-breach class action over a TurboTax and Credit Karma data breach disclosed in March 2024.
Intuit Inc. is the named defendant or respondent across all three matters. It owns and operates TurboTax, the tax-preparation platform, and Credit Karma, the consumer-finance platform it acquired in 2020.
“This proceeding arises from Respondent Intuit Inc.'s nationwide, multichannel advertising for TurboTax, Respondent's online tax preparation service.”
Source: Source: U.S. Federal Trade Commission, In the Matter of Intuit Inc., Docket No. 9408, Opinion of the Commission (redacted public version)
Why Are People Filing TurboTax Lawsuits?
People are filing TurboTax lawsuits because regulators and plaintiffs allege Intuit advertised 'free' tax filing that most consumers could not actually use, and separately failed to secure customer data in a 2024 breach. Each proceeding targets a distinct piece of that broader pattern.
The multistate and FTC actions both allege that, since at least 2016, Intuit advertised through television, radio, and online ads that consumers could file for free using TurboTax, when in fact roughly two-thirds of taxpayers were not eligible for the free product. The FTC's Commission Opinion found Intuit ran an 'AbsoluteZero' campaign with the words 'Free Guaranteed' and a separate 'Free, Free, Free' campaign, while disclaimers limiting the offer to 'simple tax returns' were small, faint, or otherwise inconspicuous.
The newer data-breach class action, filed by plaintiff Joseph Garite, alleges Intuit failed to adequately protect its computer systems, leaving sensitive customer data vulnerable to a TurboTax and Credit Karma data breach disclosed in March 2024.
A separate, older matter (resolved in 2019) alleged Intuit was aware of widespread use of TurboTax to file fraudulent tax returns and failed to adopt basic cybersecurity policies to prevent it, resulting in fraudulent returns filed in the names of thousands of real filers.
What Injuries Are Included in the TurboTax Lawsuit?
The TurboTax lawsuit includes three distinct categories of harm, spread across the separate proceedings described above: deceptive 'free' advertising, a customer-data breach, and, in an earlier matter, tax-refund fraud. Each is defined in plain language below, followed by what plaintiffs and regulators specifically alleged. Intuit has denied the material allegations in each matter it has not settled.
Deceptive 'Free' Filing Advertising
Deceptive free-filing advertising is marketing a product as free to a general audience when most of that audience does not actually qualify for the free version.
The FTC's Commission Opinion found that Intuit's ads conveyed an unqualified 'free' claim to a significant portion of consumers, most of whom could not in fact file for free, because eligibility was limited to 'simple tax returns' and disclaimers to that effect were small, faint, or otherwise inconspicuous within the ads.
TurboTax/Credit Karma Data Breach
A data breach, in this context, is unauthorized access to or exposure of customer account or financial information Intuit was responsible for safeguarding.
The Garite complaint alleges Intuit failed to adequately protect its computer systems, leaving customer data vulnerable to a breach disclosed in March 2024 affecting TurboTax and Credit Karma users, and that affected customers now face an elevated risk of identity theft and fraud as a result.
Tax-Refund Fraud Enabled by Weak Safeguards
Refund fraud, in this earlier matter, is a fraudulent tax return filed in a real taxpayer's name to redirect their refund to someone else.
An earlier class action (resolved in 2019) alleged Intuit was aware TurboTax was being used to file fraudulent returns and failed to implement basic cybersecurity policies to stop it, resulting in fraudulent returns filed in the names of thousands of filers, including people who had never used TurboTax at all.
Who Qualifies for the TurboTax Lawsuit?
You may qualify if:
- You are a current or former TurboTax or Credit Karma customer whose data may have been exposed in the breach disclosed in March 2024 (the active data-breach matter)
- You paid to file with TurboTax between 2016 and 2018 despite qualifying for a free IRS Free File option (this is the closed multistate settlement class, described for reference, not an open claims window)
- You are a servicemember or dependent who used a TurboTax Refund Advance product and believe the effective rate exceeded the federal military lending rate cap (a separate, newer proposed class action referenced in Part 2.5b research)
You may not qualify if:
- You did not use TurboTax or Credit Karma during the periods described above
- You already received a payment from the closed $141 million multistate settlement; that claims window has passed and cannot be reopened
This eligibility summary describes each matter's own claimant group. The multistate free-filing settlement is closed to new claims. The 2024 data-breach matter is the one currently accepting new claimants; confirm current intake status directly with a firm evaluating the case, such as Hilliard Law or Lieff Cabraser, before assuming eligibility.
What Is the Current Status of the TurboTax Lawsuit?
The current status of the TurboTax lawsuit differs by proceeding: the multistate free-filing settlement is fully paid out and closed, the FTC's administrative case was just redirected to federal court, and the 2024 data-breach class action remains in an active, early stage.
Multistate Attorneys General Settlement (Free-Filing Ads)
Intuit agreed to pay $141 million to resolve a multistate investigation, led by New York Attorney General Letitia James, into deceptive advertising for TurboTax's 'free' filing product. Intuit did not admit wrongdoing. Payments of up to $90 went to roughly 4.4 million consumers nationwide who paid to file between 2016 and 2018 despite being eligible to file for free through the IRS's Free File program.
| Proceeding Type | Multistate attorney general consumer-protection settlement |
| States Involved | All 50 states and the District of Columbia |
| Settlement Amount | $141,000,000 |
| Consumers Paid | Approximately 4.4 million nationwide |
| Per-Consumer Payment | Up to $90 |
| Claims Deadline | Passed; payments distributed starting May 2023 |
FTC Administrative Case, Docket No. 9408
The FTC's Commission Opinion found Intuit's 'free' TurboTax advertising deceptive and ordered a cease-and-desist. On March 20, 2026, the U.S. Court of Appeals for the Fifth Circuit vacated that order, holding that the FTC's in-house adjudication of a deceptive-advertising claim violates the constitutional separation of powers under SEC v. Jarkesy. The ruling did not clear Intuit of the underlying allegations; it sends the dispute to a federal district court instead of the FTC's internal process.
| Proceeding Type | Federal regulatory enforcement, In the Matter of Intuit Inc. |
| Docket Number | 9408 |
| Agency | Federal Trade Commission |
| Fifth Circuit Ruling | March 20, 2026, cease-and-desist order vacated |
| Current Status | Redirected to federal district court, not dismissed |
TurboTax/Credit Karma Data-Breach Class Action
Plaintiff Joseph Garite filed a proposed class action in California federal court alleging Intuit failed to adequately protect computer systems that held customer data, leaving TurboTax and Credit Karma users vulnerable to a data breach disclosed in March 2024. The case remains in an early stage, and Intuit has not been found liable.
| Proceeding Type | Federal class action, data-breach negligence claims |
| Court | U.S. District Court (California) |
| Named Plaintiff | Joseph Garite |
| Defendant | Intuit Inc. |
| Breach Disclosed | March 2024 |
| Stage | Early pretrial, no settlement reached as of this writing |
Did TurboTax Settle the Lawsuit, and What Did It Pay?
Intuit has already paid $141 million in the multistate free-filing settlement, not one single figure covering every TurboTax matter. The FTC case carries no separate payment yet, since its cease-and-desist order was vacated rather than converted into a monetary judgment, and the 2024 data-breach class action has not reached a settlement.
The $141 million figure reflects an actual, already-distributed multistate settlement, not a speculative estimate. Any eventual value of the data-breach class action or the FTC's redirected federal case is not yet known and should not be assumed from the multistate figure.
Individual multistate settlement payments varied up to $90 per consumer, based on how much a given filer paid Intuit during the 2016-2018 class period.
Latest TurboTax Lawsuit Updates
Here is the current status of the TurboTax lawsuit, updated with new filings, rulings, and settlement developments as they're confirmed. Unlike a single mass-tort MDL, this page tracks three separate proceedings on one interleaved timeline.
TurboTax Lawsuit Timeline
Fifth Circuit Vacates FTC's Cease-and-Desist Order Against Intuit
The Fifth Circuit ruled the FTC's in-house adjudication of Intuit's deceptive-advertising case unconstitutional under SEC v. Jarkesy and vacated the cease-and-desist order, sending the underlying dispute to federal district court rather than dismissing it outright.
TurboTax and Credit Karma Data Breach Disclosed
Intuit disclosed a data breach affecting TurboTax and Credit Karma customer data in March 2024, which plaintiff Joseph Garite's later class action cites as the basis for his negligence claims against the company.
FTC Announces Intuit Can No Longer Advertise TurboTax Products as Free
The FTC's Commission Opinion, finding Intuit's advertising deceptive, was covered nationally as barring the company from continuing to advertise TurboTax products as free without adequate qualification, ahead of the cease-and-desist order the Fifth Circuit later vacated.
Multistate Settlement Payments Begin Going Out to Consumers
Payments from the $141 million multistate settlement began reaching roughly 4.4 million consumers nationwide, with individual payments of up to $90 depending on how much each consumer paid to file with TurboTax during the 2016-2018 class period.
Intuit Reaches $141 Million Multistate Settlement
Intuit agreed to pay $141 million to resolve a multistate investigation, led by New York Attorney General Letitia James, into deceptive advertising for TurboTax's 'free' filing product, without admitting wrongdoing.
Court Approves Settlement in Earlier Tax-Fraud Class Action
U.S. District Judge Edward J. Davila of the Northern District of California granted final approval to a settlement in an earlier class action alleging Intuit failed to prevent fraudulent tax returns filed through TurboTax, providing relief to affected filers.
How to File a TurboTax Lawsuit
To file a TurboTax lawsuit, follow the 4 steps listed below.
- Confirm which TurboTax matter applies to you: The closed multistate settlement, the FTC's redirected federal case, and the active data-breach class action each cover a different group of Intuit customers, so start by identifying which one actually fits your situation.
- Gather records showing your TurboTax or Credit Karma use: Save filing confirmations, payment receipts, or breach-notification letters from Intuit, since these are the documents a firm evaluating a data-breach claim will ask for first.
- Contact a firm currently evaluating the data-breach matter: Firms including Hilliard Law and Lieff Cabraser have publicly described evaluating claims tied to the 2024 TurboTax/Credit Karma data breach; a case reviewer there can confirm current eligibility and any deadlines.
- Do not attempt to file a new claim in the closed multistate settlement: That settlement's claims window has already passed and payments were distributed starting in 2023; a new claim there cannot be filed.
Answer a few questions and a case reviewer will follow up. Free, no obligation.
A case reviewer will follow up soon.
What Did Intuit Allegedly Know About TurboTax's Free-Filing Ads and Data Security?
Across these proceedings, the allegations describe two separate patterns: that Intuit knew most consumers exposed to its 'free' ads would not actually qualify, and that its systems did not adequately protect the customer data later exposed in the 2024 breach. Intuit has not been found liable in the pending matters and has denied wrongdoing where it has not settled.
Intuit Inc. is the maker of TurboTax and, since a 2020 acquisition, also owns Credit Karma. The FTC's Commission Opinion found that Intuit's disclaimers limiting its free offer to 'simple tax returns' were small, faint, or otherwise inconspicuous relative to the prominent 'free' claims in the same ads.
Frequently Asked Questions
What is the TurboTax lawsuit about?
The TurboTax lawsuit is actually several separate proceedings against Intuit Inc.: a closed $141 million multistate settlement over deceptive 'free' filing ads, an FTC administrative case whose order the Fifth Circuit vacated in March 2026, and an active 2024 class action over a TurboTax/Credit Karma data breach.
Is the TurboTax lawsuit a class action?
The data-breach matter, filed by plaintiff Joseph Garite, is a proposed federal class action. The multistate settlement was a government consumer-protection action brought by state attorneys general, not a private class action, and the FTC case is a federal regulatory proceeding.
Who is the defendant in the TurboTax lawsuit?
Intuit Inc. is the named defendant or respondent across every proceeding described on this page. Intuit owns and operates TurboTax and Credit Karma and has denied wrongdoing in the matters it has not settled.
Did TurboTax settle the lawsuit?
Intuit already settled the multistate free-filing case for $141 million, paid out starting in 2023. The FTC's separate case was not converted into a payment; its cease-and-desist order was vacated in March 2026 and sent to federal court instead. The 2024 data-breach class action has not settled.
Can I still file a claim in the TurboTax lawsuit?
Not in the closed $141 million multistate settlement; that claims window has passed. The active matter currently accepting new claimants is the 2024 TurboTax/Credit Karma data-breach class action; contact a firm evaluating that case, such as Hilliard Law or Lieff Cabraser, to confirm eligibility.
How do I know which TurboTax lawsuit applies to me?
It depends on which matter you were part of: the multistate settlement covered consumers who paid to file between 2016 and 2018 despite qualifying for free filing, while the active data-breach class action covers TurboTax and Credit Karma customers whose data may have been exposed in the breach disclosed in March 2024.