Minneapolis-based Best Buy is staring down a new class-action lawsuit from a Virginia shopper who says the electronics giant quietly turned customers’ personal information into an advertising side hustle. The complaint claims names, mailing addresses, phone numbers and in-store purchase histories were funneled into a third-party data system, transformed into enriched marketing profiles and then sold through Best Buy’s advertising business, all without proper notice to shoppers. The suit is seeking statutory damages, disgorgement and court orders blocking the alleged practices on behalf of affected customers.
What the lawsuit alleges
According to the class action complaint, plaintiff Corlis Moon, a resident of Manassas, Virginia, says she shopped at a Best Buy store and that the company then shared her nonpublic personal information without giving the notice required by Virginia law. The filing describes a data pipeline in which Best Buy allegedly sent customer PII into a data clean room run by LiveRamp. That environment, the complaint says, was used to combine and upgrade customer records into advertiser-ready profiles that could be sold as part of Best Buy’s growing media business.
Best Buy Ads and the data stack
At the center of the dispute is Best Buy’s retail media operation, branded as Best Buy Ads. Marketing materials for the program boast access to “15K” unique attributes to enrich customer records and a 93% revenue-identification rate, positioning the retailer as a data-rich advertising partner. The complaint highlights Best Buy’s reported use of a LiveRamp-powered clean room to match first-party purchase data with broader identity graphs. LiveRamp, which expanded its clean-room capabilities after acquiring Habu, has become a key data-collaboration provider in the ad-tech ecosystem, making retailers’ transaction data more attractive to brands.
Legal theory and remedies
Moon’s claims are rooted in Virginia’s Personal Information Privacy Act, a statute that prohibits merchants from selling purchaser information collected at the point of sale without first providing notice. The complaint seeks $100 in statutory damages per alleged violation, along with injunctive relief to stop the challenged practices and disgorgement of any profits tied to the data sales. Moon is asking the court to certify a nationwide class of Best Buy shoppers as well as a Virginia subclass, and the filing also requests attorneys’ fees if the case succeeds on the merits.
Regulators and industry context
The lawsuit leans on federal regulators’ skepticism about some of the industry’s favorite buzzwords. The Federal Trade Commission has warned that data clean rooms “are not rooms, do not clean data,” a line the complaint quotes to argue that using such tools does not automatically neutralize privacy risks. The case lands at a time when LiveRamp and other ad-tech firms are rapidly expanding retail media capabilities, with first-party retail data becoming a hot commodity amid cookie crackdowns and shifting privacy norms. That trend has been underscored by Publicis’s recent acquisition of LiveRamp, which the complaint cites as an example of how valuable these retail data pipes have become.
What happens next
The case is filed as Moon v. Best Buy Co. Inc. Initial coverage of the lawsuit appeared at Top Class Actions, which identifies the attorneys representing Moon. Best Buy did not immediately respond to requests for comment. On the federal docket, the case is listed as No. 0:26-cv-02381-JMB-DJF and is expected to move through early briefing and potential motions practice before any judge decides whether to certify a class.
