Apple is the latest firm to be hit by class-action lawsuit for Spectre and Meltdown CPU flaw
Filing accuses the Apple of failing to keep processors in iPhones, iPads, and Apple TVs secure

Apple has become the latest tech giant to be hit by a class-action lawsuit in response to the Spectre and Meltdown CPU security debacle, which has quickly become one of the biggest security vulnerabilities ever uncovered.
The class-action complaint, which sprawls over a 17-page document, was filed earlier this month in a San Jose district court in California.
The filing accuses the Apple of failing to keep the ARM-based processors in iPhones, iPads, and Apple TVs secure, as previously claimed. It also accuses the Cupertino firm of withholding vital info on the Spectre flaws from customers for months, selling products from the arrival of the A6 chip in the iPhone 5 way back in 2012 while knowing it was vulnerable to the CPU flaws which allow for side-channel attacks.
Apple isn't the only offender to be hit by a potentially-damaging class-action lawsuit. Chip maker AMD is also being sued over claims that it artificially inflated its stock price by keeping quiet about how the Spectre flaws affected its chips.
A filing to a US court in the northern district of California made by Pomerantz LLP on behalf of shareholder Doyun Kim claims that AMD's initial reaction to the flaw, which saw it declare that Spectre posed "near zero risk" to its chips before admitting that its processors were, in fact, affected by both variants of the vulnerability, resulted in AMD's stock prices plummeting.
"As a result of defendants' wrongful acts and omissions, and the precipitous decline in the market value of the company's common shares, plaintiff and other class members have suffered significant losses and damages," the filing says.
It comes as no surprise that Intel is in the same boat, too. The chip giant is also fending off multiple class-action suits, such as one regarding the Intel-powered Macs Apple sells, which are also affected by Meltdown and Spectre.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
But the news of the lawsuits comes as no surprise and the Meltdown and Spectre flaws shouldn't be taken lightly. It has come to light that they are present in the vast majority of modern processors, could allow hackers to break into the devices and steal sensitive data.
However, no data breaches have been reported as yet, even though the vulnerabilities exist in the majority of processors dating from 1995. The flaw wasn't reported until June last year, despite Intel knowing about it since before then.
The lawyers representing various Californian comanies' claimants think there will be more cases coming to light in the coming months, describing it as "one of the largest security flaws ever facing the American public". They are urging Intel, for example, to fix the problem and to offer those affected compensation for any losses that have occurred.
However, for this to happen, businesses and individuals would have to provide solid evidence that they have been adversely affected by the flaws.
-
Bigger salaries, more burnout: Is the CISO role in crisis?
In-depth CISOs are more stressed than ever before – but why is this and what can be done?
By Kate O'Flaherty Published
-
Cheap cyber crime kits can be bought on the dark web for less than $25
News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
By Emma Woollacott Published
-
PyPI attack: Targeting of repository 'shows no sign of stopping'
News Greater collaboration and understanding of attackers’ tactics is key to mitigating open source security threats
By Ross Kelly Published
-
Capita's handling of cyber attack shows companies still fail at breach reporting
Analysis Capita initially told customers there was “no evidence” of data having been compromised in the March cyber attack
By Ross Kelly Published
-
Malware being pushed to businesses by search engines remains a pervasive threat
News High-profile malvertising campaigns in recent months have surged
By Ross Kelly Published
-
There's only one way to avoid credential stuffing attacks
Opinion PayPal accounts were breached last year due to a credential stuffing attack, but can PayPal avoid taking responsibility?
By Davey Winder Published
-
Five things to consider before choosing an MFA solution
In-depth Because we all should move on from using “password” as a password
By Rene Millman Published
-
Cyber security suffers from a communication problem
News Negative language around ‘human failures’ is eroding trust between security teams and broader business functions - it has to stop
By Ross Kelly Published
-
Does LastPass really deserve a last chance?
Opinion After several disastrous security incidents and a communications breakdown, it’s time to leave LastPass for pastures new
By Ross Kelly Published
-
What is the spell-jacking vulnerability and how can your business avoid exposing data?
In-depth Spell-jacking vulnerabilities are threatening to unwittingly leak data to third parties, undermining any drive to protect privacy
By Davey Winder Published