Security Experts:

Connect with us

Hi, what are you looking for?


Management & Strategy

Lenovo Pays $7.3 Million to Settle Superfish Adware Lawsuit

Lenovo has agreed to pay $7.3 million to settle a consumer class action lawsuit related to the Superfish adware scandal from 2015.

Lenovo has agreed to pay $7.3 million to settle a consumer class action lawsuit related to the Superfish adware scandal from 2015.

Back in February 2015, experts revealed that a browser add-on named WindowShopper (VisualDiscovery) from Superfish had been injecting ads into web pages using a local proxy and a self-signed root certificate.

The problematic app, pre-installed on hundreds of thousands of Lenovo laptops, launched an MitM attack on users’ browsing sessions, allowing it to intercept sensitive information. Experts also raised concerns that by replacing legitimate certificates with its own, the software exposed people to malicious websites that used fake certificates.

Superfish previously agreed to pay $1 million in response to a class action lawsuit and now Lenovo has agreed to pay $7.3 million – the $8.7 million has been described as a “settlement fund” from which members of the class action can make claims.

Members can choose between receiving an estimated cash payment of $40 for every Lenovo device they have purchased, or submit receipts and other documentation to recover the money they spent dealing with the Superfish adware, up to $750.

The $8.3 million obtained by plaintiffs represents roughly a quarter of the $35 million they estimated to be the best case recovery following a trial.

Last year, Lenovo agreed to pay $3.5 million to settle Superfish-related charges with the U.S. Federal Trade Commission (FTC) and Attorneys General in 32 states. As part of that settlement, Lenovo is also required to obtain affirmative consent before activating this type of software, and it must maintain a comprehensive security program for preinstalled applications for a period of 20 years.

Related: Uber Agrees to $148M Settlement With States Over Data Breach

Related: Altaba Settles Yahoo Breach Lawsuits for $47 Million

Related: Yahoo to Pay $50M, Other Costs for Massive Security Breach

Written By

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this webinar to learn best practices that organizations can use to improve both their resilience to new threats and their response times to incidents.


Join this live webinar as we explore the potential security threats that can arise when third parties are granted access to a sensitive data or systems.


Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Management & Strategy

SecurityWeek examines how a layoff-induced influx of experienced professionals into the job seeker market is affecting or might affect, the skills gap and recruitment...


Twenty-one cybersecurity-related M&A deals were announced in December 2022.

Management & Strategy

Industry professionals comment on the recent disruption of the Hive ransomware operation and its hacking by law enforcement.

Management & Strategy

Tens of cybersecurity companies have announced cutting staff over the past year, in some cases significant portions of their global workforce.

CISO Strategy

SecurityWeek spoke with more than 300 cybersecurity experts to see what is bubbling beneath the surface, and examine how those evolving threats will present...


The three primary drivers for cyber regulations are voter privacy, the economy, and national security – with the complication that the first is often...