In the case of K.W. v Accor Management Canada Inc. dated July 5, 2023, the plaintiff K.W. sought certification for a class action against the defendant Accor Management Canada Inc. regarding unauthorized access to a database containing health information. The Willow Stream Spa, operated by Accor, collected data from clients. An imposter had obtained login credentials, causing the spa to deactivate accounts and reset credentials. Clients' personal information, including credit card details, might have been accessed. The breach had raised concerns about identity theft and credit card fraud. The plaintiff and another client had experienced anxiety and an increase in spam calls. The full extent of the breach was unknown, and potential misuse of the information remained a possibility. The court found that the plaintiff's claim did not meet the required cause of action under the Consumer Protection Act. Other certification requirements were not considered due to this conclusion. The plaintiff's application was dismissed. The request for anonymity was also dismissed since the certification application had been rejected.