The lawsuit was filed after Google failed to disclose a vulnerability in the Google+ API for third-party application developers. Using this vulnerability, attackers could gain access to such personal data of users as name, gender, age, and email address.