Eightfold Lawsuit: FCRA Claims Over AI Match Scores

Two job applicants have filed a class action lawsuit against Eightfold AI, alleging that the company’s AI hiring platform secretly builds the equivalent of consumer credit reports on job seekers and hands them to employers without ever telling applicants the reports exist, letting them see what’s inside, or giving them a chance to fix errors. Filed on January 20, 2026, in Contra Costa County Superior Court and later removed to federal court in the Northern District of California, Kistler v. Eightfold AI, Inc. is one of the first cases to argue that an AI-powered hiring tool must comply with the Fair Credit Reporting Act.¹

The named plaintiffs are Erin Kistler of Los Angeles and Sruti Bhaumik of Walnut Creek. They are represented by Outten & Golden LLP and Towards Justice, and the case is the first filed under Towards Justice’s “AI in the Workplace Accountability Project.” Among the lawyers is Jenny R. Yang, a former chair of the Equal Employment Opportunity Commission.²

What the Complaint Says Eightfold Does

According to the complaint, when someone applies for a job at a company that uses Eightfold, the platform assembles a profile of the applicant from three sources: what the applicant submits, what the employer provides, and data scraped from third-party sites including LinkedIn, GitHub, Stack Overflow, Hoovers, and Crunchbase. Eightfold’s platform, the complaint says, draws on more than 1.5 billion data points and profiles of over one billion people worldwide.¹

Citing Eightfold’s own privacy policy, the plaintiffs say the platform draws inferences from that data to create profiles reflecting an applicant’s “preferences, characteristics, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.” The system then produces a “Match Score,” a number from 0 to 5 in half-point increments, generated by a proprietary large language model that weighs skill overlap, title progression, seniority fit, and patterns from tens of millions of historical hiring outcomes.

The core allegation is that employers use those Match Scores to filter applicants before any human sees the materials. A low-scoring candidate can be dropped by an algorithm running on data the applicant never knew was collected and cannot review or correct.

The Legal Theory: Match Scores as Consumer Reports

The plaintiffs bring claims under three statutes: the federal Fair Credit Reporting Act (FCRA), California’s Investigative Consumer Reporting Agencies Act (ICRAA), and California’s Unfair Competition Law.¹ The ICRAA reaches investigative reports compiled “through any means” rather than only through personal interviews, giving it broader scope than its federal counterpart in some respects.³

The legal argument is straightforward. The FCRA defines a “consumer report” as a communication by a consumer reporting agency about a person’s “character, general reputation, personal characteristics, or mode of living” used to evaluate that person for employment or similar purposes. The plaintiffs say Eightfold’s Match Scores and underlying dossiers fit that definition. If a court agrees, Eightfold has been operating as a consumer reporting agency without meeting any of the duties that role carries: clear disclosure that a report will be pulled, written authorization from the applicant, reasonable procedures for accuracy, consumer access to the file, a dispute process, and pre-adverse-action notice with a copy of the report and a summary of rights.

The complaint leans on Consumer Financial Protection Bureau Circular 2024-06, published October 24, 2024, which said that third-party developers who assemble or evaluate consumer data to produce algorithmic scores used for hiring, promotion, or retention may qualify as consumer reporting agencies under the FCRA, particularly when they draw on data beyond what the requesting employer supplies.⁴

One feature of this theory sets it apart from most AI-hiring litigation: the plaintiffs do not have to prove the algorithm is biased. Their claim is that the process itself is illegal because it happens in secret, without the notices and rights the law requires. Outcomes are beside the point.

The Two Applicants at the Center of the Case

Erin Kistler applied for product management roles at PayPal in December 2025 through application links containing “eightfold.ai/careers.” She says she had no meaningful way to opt out of Eightfold’s data collection, was never shown any report about her, and never learned she had a right to dispute what it contained. She received no interview invitations or offers.⁵

Sruti Bhaumik applied for positions at Microsoft and other companies starting in 2023, including a Senior Technical Program Manager–Responsible AI role in mid-2025. She alleges Eightfold processed her data without the disclosures, authorizations, or dispute rights federal and California law require. Both women say they may have been eliminated by a hidden scoring process before a recruiter ever looked at their applications.

Eightfold’s Response

Eightfold has denied the allegations, calling them “factually incorrect.” In a public statement, the company said it “does not ‘lurk’ or scrape personal web history, social media or the like to build ‘secret dossiers,'” and that its platform operates only on data “submitted by candidates to our customers” or “provided by our customers.” Eightfold also said applicants can “view and, if necessary, correct the data Eightfold has gathered,” describing that transparency as a platform “differentiator.”⁶

The plaintiffs’ lawyers replied that their factual allegations come from Eightfold’s own marketing materials and patents, which they say describe a system built on a “vast pool of third-party data” used to score and rank applicants.

Where the Case Stands

Eightfold removed the case to the U.S. District Court for the Northern District of California, where it was assigned case number 3:26-cv-01768 and drawn to Judge Yvonne Gonzalez Rogers.⁷ The company filed a motion to dismiss on April 20, 2026. The plaintiffs opposed it on June 18, 2026. Eightfold’s reply is due July 9, 2026, and the court has set a hearing for August 4, 2026, in Oakland.⁸

What’s at Stake Financially

The potential exposure is large. Willful FCRA violations carry statutory damages of $100 to $1,000 per violation plus punitive damages.⁹ With the complaint alleging over a billion profiles in Eightfold’s database, even the low end of that range is substantial in a certified class action. California’s ICRAA goes further, allowing recovery of the greater of actual damages or $10,000 per violation, plus punitive damages for grossly negligent or willful conduct and attorney’s fees.³

Why the Case Reaches Beyond Eightfold

The complaint identifies Microsoft, PayPal, Morgan Stanley, Starbucks, Chevron, and Bayer as employers using Eightfold’s platform.² Eightfold’s website adds clients including Salesforce, Vodafone, the U.S. Department of Defense, the New York State Department of Labor, Deutsche Telekom, and Coca-Cola Europacific Partners.¹⁰ If the plaintiffs’ theory succeeds, each of those employers could face compliance questions about whether it obtained proper authorization from applicants and followed the FCRA’s adverse-action steps.

The case also complements a separate line of AI-hiring litigation. In Mobley v. Workday, Inc., filed in 2023 in the same federal district, plaintiffs allege that Workday’s AI screening tools discriminate based on age, race, and disability. In July 2024, Judge Rita Lin allowed the case to proceed on the theory that Workday could be held liable as an “agent” of the employers using its software, and by May 2025 she had granted preliminary certification for a collective action under the Age Discrimination in Employment Act.¹¹ Between the two cases, AI hiring vendors face pressure on two fronts. Workday tests whether vendors can be held directly liable for discriminatory outcomes. Eightfold tests whether vendors must comply with consumer-reporting transparency rules even when their scores are not alleged to be biased.

1
ClassAction.org. Kistler et al. v. Eightfold AI Inc. Complaint
2
Outten & Golden LLP. Landmark Class Action Accuses Eightfold AI of Illegally Producing Hidden Credit Reports on Job Applicants
3
Privacy Rights Clearinghouse. Investigative Consumer Reporting Agencies Act (California)
4
Consumer Financial Protection Bureau. Consumer Financial Protection Circular 2024-06
5
HRReporter. Lawsuit Says AI Hiring Firm Illegally Built Secret Dossiers on Job Applicants
6
NBC San Diego. Class Action Lawsuit Claims AI Platform Sabotages Job Seekers
7
Justia. Kistler v. Eightfold AI Inc.
8
CourtListener. Kistler v. Eightfold AI Inc. Docket
9
Workforce Bulletin. AI Hiring Tools and Consumer Reports: Understanding the Eightfold Litigation
10
Eightfold AI. Customer Stories
11
University of Miami Law Review. Help Wanted: Screened by Algorithms