As has been widely reported, Yahoo announced on September 22, 2016 that it had suffered a hack in 2014 that compromised customer information relating to 500 million user accounts, approximately half of all accounts Yahoo maintains. As has become common, this revelation was swiftly followed by class action lawsuits commenced in the US on behalf of users whose information may have been stolen. The three complaints filed to date allege claims based on a wide array of legal theories, but share certain common obstacles to success.