Eightfold AI was sued for allegedly scoring over a billion workers via secretly scraped data
A January 2026 class action lawsuit alleges Eightfold AI scraped personal data on over one billion workers from sources including LinkedIn, GitHub, and social media, then produced hidden AI-scored profiles called Match Scores that employers used to filter out low-ranked candidates before any human review. The plaintiffs allege Eightfold never disclosed these reports to applicants, never obtained consent, and never provided an opportunity to dispute errors, violating the Fair Credit Reporting Act and California's Investigative Consumer Reporting Agencies Act. The case was filed in Contra Costa County Superior Court by two job applicants on behalf of a nationwide class.
Eightfold assembled secret consumer reports on job applicants from scraped data on over a billion workers, scored them zero to five, and filtered them out of hiring pipelines without ever telling them the reports existed.
Key facts
- What
- A January 2026 class action lawsuit alleges Eightfold AI scraped personal data on over one billion workers from sources including LinkedIn, GitHub, and social media, then produced hidden AI-scored profiles called Match Scores that employers used to filter out low-ranked candidates before any human review.
- Incident date
- Jan 20, 2026
- Who
- Eightfold AI Inc.
- Failure mode
- Policy Violation
- AI surface
- Agentic Workflow
- Severity
- High
What happened
Two job applicants, Erin Kistler and Sruti Bhaumik, filed a class action on January 20, 2026, alleging that Eightfold AI scraped data on over one billion workers from sources including LinkedIn, GitHub, Stack Overflow, social media, and tracking data to produce secret AI-scored profiles. Eightfold's system assigned each applicant a Match Score from 0 to 5 based on predicted likelihood of success, and employers used these scores to screen out low-ranked candidates before any human review. Applicants were never told these reports existed, never given copies, and never offered a chance to dispute errors, in alleged violation of the FCRA and California's ICRAA.
What broke inside the model
- 01 · TriggerA prompt pushes against a deployment boundary.
- 02 · Model stepThe model produces the disallowed output.
- 03 · Control gapNo enforcement blocks it at generation time.
- 04 · FailureThe output crosses the policy line.
- 05 · ConsequenceA limit the business set is breached in public.
The output crosses a policy boundary the deployment had defined.
Eightfold's proprietary LLM and deep learning system assembled consumer reports by scraping data from social media, LinkedIn, GitHub, and other third-party sources, then generated Match Scores from 0 to 5 predicting a candidate's likelihood of success. The system operated entirely without the FCRA-mandated procedures that consumer reporting agencies must follow: no standalone disclosure to applicants, no copies of reports, and no opportunity to dispute inaccuracies. By treating its outputs as something other than consumer reports, Eightfold sidestepped the statutory safeguards designed to prevent hidden, unreviewable algorithmic decisions from harming job seekers.
What it cost
Sources
- PrimaryWorkers Accuse Eightfold AI of Illegally Producing Hidden Credit Reports on Job Applicantsouttengolden.com
- Court FilingClass Action Complaint Against Eightfold AI Inc. for Violations of the Fair Credit Reporting Actouttengolden.com
- PressAI Hiring Under Fire: What the Eightfold Lawsuit Means for Every Employer Using Algorithmic Screeningjoneswalker.com
Cite this entry
https://failureindex.ai/failures/eightfold-ai-sued-allegedly-scoring-billionAI Failure Index. "Eightfold AI was sued for allegedly scoring over a billion workers via secretly scraped data" (FI-0154). Realm Labs. https://failureindex.ai/failures/eightfold-ai-sued-allegedly-scoring-billion (indexed Jun 4, 2026).Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0154. Full dataset at /data.
Note from Realm Labs, the Index steward
How Realm would have caught this
- Prism
- OmniGuard
Realm compares what the model is about to output or do against the policy that governs the deployment, in real time, and can deny or redact the action before it takes effect, which is the gap an after-the-fact review never closes in time.