Marketing Tech Under Fire: Zeta Global Securities Fraud Lawsuit Moves to Discovery

In a pivotal development for the marketing technology sector, Zeta Global Holdings Corp. now faces the full force of a federal securities fraud lawsuit. On July 8, 2026, U.S. District Judge Dale Ho of the Southern District of New York issued a 29-page ruling denying Zeta’s motion to dismiss the class action complaint. The court’s decision marks a significant setback for the company, finding that investors have adequately alleged that Zeta made materially misleading statements regarding its core data collection practices.

At the center of the dispute is the integrity of Zeta’s flagship data asset. For years, the company touted its marketing platform as being powered by an "opted-in" data set encompassing over 240 million individuals in the United States. Plaintiffs, led by the Allegheny County Employees’ Retirement System and investor Amir Konigsberg, allege this figure was a gross exaggeration—a misrepresentation that effectively inflated the company’s valuation before a series of disclosures caused the stock price to plummet.

The Core Allegations: Transparency vs. Reality

The lawsuit, In re Zeta Global Holdings Corporation Securities Litigation, contends that Zeta’s leadership—including CEO David A. Steinberg, CFO Christopher Greiner, Chief Data Officer Neej Gore, and Chief Privacy Officer Benjamin Hayes—orchestrated a long-running narrative of data legitimacy.

The plaintiffs allege that Zeta’s internal definition of "opted-in" was far more porous than its public-facing marketing suggested. While the company frequently described this data as "philosophically" central to its business model, the complaint asserts that when the true scope of consumer consent was finally revealed in late 2024, the actual number of individuals with legitimate opt-in email permission was roughly 110 million—less than half of the 240 million figure cited for years.

The legal challenge suggests that this discrepancy was not merely a case of semantic drift, but a calculated effort to project a level of consumer trust that simply did not exist. The complaint further alleges that the company relied on "consent farms"—a network of websites designed to harvest personal information through deceptive or manipulative design—to inflate its data reach.

Chronology of a Market Correction

The narrative of the lawsuit is framed by a series of disclosures that eroded investor confidence and wiped out significant shareholder value.

• November 13, 2024: The first major tremor hit when Culper Research published a report alleging that Zeta operated "consent farms" and engaged in questionable data-swapping practices. Zeta’s stock price reacted violently, falling over 37% in a single day.
• November 20, 2024: Zeta launched an aggressive counter-offensive. In a document titled "Setting the Record Straight" and during an investor call, company executives adamantly denied the existence of consent farms. CDO Neej Gore reaffirmed the 240 million figure, stating that all users were "opted-in for tracking and monitoring."
• December 9, 2024: During the "Zeta Data Summit," intended to restore transparency, the company’s narrative began to crack. Gore admitted that the actual number of individuals with opt-in email permission was approximately 110 million. Shares fell from $26.10 to $22.97.
• February 26, 2025: In its annual SEC filing, Zeta quietly scrubbed all references to "opted-in" data from its disclosures. The market responded with another sell-off, with shares dropping significantly over the following two sessions.
• March 10, 2025: A report by The Capitol Forum highlighted the terminology shift. A Zeta spokesperson claimed the change was meant to "prevent misinterpretations." By the end of the day, Zeta stock closed at $14.03, representing a nearly 62% decline from its class period high of $36.74.

Data Science Experts and the "Leaky Form" Allegation

To substantiate the "consent farm" claims, lead plaintiffs commissioned an investigation by a veteran data science expert. Using digital marketing analytics, the expert analyzed 40 websites previously flagged by Culper Research. The findings were stark: 15 of the 18 active sites examined met the FTC’s definition of a consent farm.

The expert also identified a technical practice termed "leaky form" behavior. In these instances, websites were configured to transmit personal data—names, email addresses, and phone numbers—to servers in real-time, the moment a user typed into a form, regardless of whether the user clicked "submit." This allowed companies to capture data from users who abandoned the process mid-way. Furthermore, the expert uncovered evidence of sites using unauthorized corporate logos (such as Amazon or Disney) to lend false credibility to job-posting portals, a practice the complaint labels as inherently deceptive.

Regarding the acquisition of Disqus, which accounted for up to 33% of Zeta’s data cloud, the complaint provides a damning critique. While Zeta executives claimed Disqus users were "opted-in," the lawsuit alleges that the platform’s registration process forced users to share data to sign up, with no opt-in checkbox presented. Privacy controls were only accessible as an "opt-out" buried deep within the company’s privacy policy, which Professor Alessandro Acquisti of Carnegie Mellon characterized as "take it or leave it," rather than true consent.

Official Responses and Legal Strategy

Zeta Global has maintained a posture of firm denial throughout the proceedings. In response to the ruling, a company spokesperson reiterated that the claims are "meritless" and expressed full confidence that the company would prevail once the merits of the case are heard.

"Zeta remains confident that our data gathering and management, as well as our privacy policies and practices, comply with applicable law and support our mission of delivering value for our clients and generating long-term shareholder value," the spokesperson stated.

In its motion to dismiss, Zeta’s legal team argued that "opt-in" is a broad term subject to different interpretations within the digital marketing landscape. They contended that requiring users to agree to terms of service to register for a site constitutes a form of consent. However, Judge Ho’s decision effectively ruled that the question of whether this interpretation is misleading—and whether it was used to deceive investors—is a matter of fact that must be decided at trial, not on a motion to dismiss.

The Role of Executive Trading

A compelling, though secondary, aspect of the complaint involves the trading activity of CEO David A. Steinberg. The plaintiffs point out that while Steinberg did not sell shares directly in open-market transactions, he moved large volumes of stock through a complex network of trusts and LLCs.

The complaint alleges that Steinberg sold approximately 13.3 million shares for over $270 million. The plaintiffs argue that the timing of these sales—often occurring during quarterly blackout windows that the company’s own policies were intended to restrict—suggests a personal financial incentive to maintain an artificially high stock price while the company’s public narrative remained unchallenged. While not alleging these trades were explicitly illegal, the plaintiffs posit that this activity provides the necessary "scienter"—or intent to defraud—required for a successful securities litigation.

Implications for the Marketing Industry

The Zeta Global case serves as a warning shot for the entire AdTech and MarTech industry. As the regulatory and legal environment regarding consumer privacy becomes increasingly hostile to opaque data practices, the distinction between "opt-in" and "opt-out" has moved from a technical nuance to a multi-billion dollar liability.

Many companies in this space have scaled their businesses through rapid acquisitions, often inheriting data sets of varying provenance. The Zeta lawsuit highlights the dangers of rebranding these heterogeneous data sets under a monolithic, "opt-in" label.

As the case moves into discovery, it will force a rare, court-sanctioned examination of how marketing technology companies actually construct their identity graphs. For marketers who rely on these vendors to maintain their own compliance with privacy laws, the outcome of this litigation may redefine the industry standard for due diligence. If the plaintiffs succeed, the case could set a precedent that compels companies to provide granular, verifiable proof of consent for every record in their databases.

The legal battle is far from over, but the judiciary has clearly signaled that the era of "trust us" data disclosures is coming to an end. Whether Zeta Global’s practices represent an industry-standard interpretation of consent or a sophisticated attempt to mislead shareholders, the courtroom will ultimately decide. As of July 22, 2026, both parties are expected to outline the roadmap for the discovery phase, setting the stage for what promises to be a landmark case in the intersection of data privacy and securities law.