Skip to main content

A New Lawsuit Accuses the DOJ of Violating the Privacy Of About 100 Epstein Victims

Carolyn Hansen, J.D.

Article by: Carolyn Hansen, J.D.

Contributing Author

Reviewed by Joseph Fawbush, Esq. | Last updated on

In a class action lawsuit filed in federal court in the Northern District of California, an anonymous Epstein victim blames the Department of Justice (DOJ) for violating her privacy and the privacy of about 100 Epstein victims. The complaint, filed on behalf of Jane Doe 1 and others similarly situated, alleges that the DOJ published identifying information about them when it released the Epstein files. The lawsuit also names Google for continuously republishing the information and refusing the victim’s pleas to take it down. Here’s what you should know.

The Privacy Act of 1974 and State Laws on Privacy and Doxxing

The lawsuit says that in late 2025 and early 2026, the DOJ outed approximately 100 survivors of the disgraced financier and convicted sex offender. Even after the government acknowledged that the disclosure violated the survivors’ rights and withdrew the information, it remained available online. It continues to appear on the search engine results page (“the SERP”), including in Google’s AI overviews.

Sex trafficking and abuse survivors report that they faced renewed trauma because their names had been released online. Strangers called them, sent threatening emails and accused them of conspiring with Epstein, among other things.

Jane Doe I has brought this claim individually and on behalf of a class under the Privacy Act of 1974, 5 U.S.C. § 552a. The Privacy Act establishes a code of fair information practices that governs federal agencies maintain and use information. It prohibits federal agencies from disclosing records without written consent except under certain, limited conditions.

The lawsuit also mentions other California state laws, such as the California Consumer Privacy Act (CCPA) and California Civil Code § 1708.89, which prohibit “doxxing” (intentionally disclosing information to make someone afraid for their safety).

The lawsuit is looking for injunctive relief and damages arising from the wrongful disclosure and republication of victim-identifying information of Jeffrey Epstein’s sexual abuse survivors. (Injunctive relief means that they’re seeking a court order to prohibit a particular action. Here, an injunction would mean taking the identifying information down.)

Weren’t the Victim Names in the Epstein Files Redacted?

Yes, and no. Redaction was sloppy and incomplete for many reasons. Victim names were removed from the “to” and “from” fields of emails (usually by putting a black bar over them). But they weren’t always removed from the body of the emails. So, if you were reading the Epstein files, you might not know who sent the email or who received it, but you could see an Epstein survivor’s name in the email and figure out who it was talking about — especially since other personal information, like addresses and personal details, were often published unredacted.

Worse than that, when the files were first publicly released under the Epstein Files Transparency Act in December 2025, reporters, data analysts, and internet sleuths quickly figured out that it was easy to get around the black boxes that had been added to documents.

By simply copying and pasting text from the PDF into a plain text editor, everything became readable. That’s probably because the DOJ used superficial black boxes available in tools like Adobe Acrobat to cover up information that was there instead of permanent redaction, which would have removed the underlying data from the document.

Even more, the DOJ left metadata in the files it released. Metadata can reveal things like document author names, edit history, and internal comments, and even file properties that contain original text. Anyone can see metadata by using their mouse to right-click on an internet page, and then choosing “view page source” or “inspect.”

The United States acknowledged that it had released several thousand pages of records that revealed the personally identifiable information of Epstein’s survivors. DOJ representatives said that the disclosure was caused by “human errors,” “technical errors,” and “quality control measures” being “hampered” by the limitations of their document review platform.

The Internet Is Forever?

After the DOJ released the kind-of-unredacted Epstein files, Google indexed and cached them like it does other digital content. Because of that, searches for survivors’ names, or searches for their names combined with other terms like “Epstein” or “victim” or “survivor” generate search results, including AI search snippets, that display the victims’ full names, contact information, and their relation to Epstein. The lawsuit alleges that Google refuses to remove, de-index, or block access to the offending materials.

You’ve probably heard that “the internet is forever,” meaning that anything that’s put online can eventually come back to haunt us. Historically, this has been true — once something is available on the internet, a person does not have complete control over getting that information back. It is out there in the world, may have been downloaded to private servers, and can be shared again in different forms. However, there are some things that search engines and social media outlets can do to prevent information from being so easy to access that a quick Google search pulls it right up.

Bondi’s Departure as Attorney General Was Related to the DOJ Handling of the Epstein Files

Just this week, President Trump fired Attorney General Pam Bondi. Bondi had served as the head of the DOJ during the release of the Epstein files. By most accounts, her handling of the files — including her failure to redact the victims' names — was a major reason she was relieved of her role.

The lawsuit mentions Bondi specifically. It alleges that the United States, acting through the DOJ, made a deliberate policy choice to prioritize rapid, large-volume disclosure of the files rather than protecting Epstein survivors’ privacy. The complaint quotes Bondi, saying that the DOJ was “following through on President Trump’s commitment to transparency and lifting the veil on the disgusting actions of Jeffrey Epstein and his co-conspirators.”

Was this helpful?

Copied to clipboard