fbpx

Automatic Funds Transfer Services Vehicle Info Exposure Class Action

Yet another company is being sued for failing to protect information from a ransomware attack. This time, the defendant is Automatic Funds Transfer Services, Inc. (AFTS). The complaint says that this time the information exposed includes names, addresses, license plate numbers, vehicle identification numbers, for possibly as many as 38 million people.

The class for this action is all persons whose California motor vehicle registration information was disclosed as a result of a ransomware attack on AFTS’s unsecured servers and systems that was announced on February 17, 2021.

AFTS provides address-verification services. This data breach is so significant in part because the California DMV uses the company for addresses associated with motor vehicle registrations.

In fact, it seems to have been the California DMV that announced the ransomware attack, which occurred in February 2021. The complaint quotes the DMV as saying the attack may have exposed “the last 20 months of California vehicle registration records that contain names, addresses, license plate numbers and vehicle identification numbers.”

According to the complaint, “the harm caused to California citizens by the Data Breach is already apparent. Just two days after the California DMV announced the breach, reports have surfaced that a criminal ‘ransomware gang’ operating under the name ‘Cuba’ is selling off data stolen during the Data Breach on the dark web.”

Other customers of AFTS throughout the country may also be affected. The complaint says that “[s]everal municipalities have already confirmed that they are affected…”

Alarmingly, AFTS has not given out any guidance to those who may be affected; in fact, the complaint alleges that “AFTS’s website appear to [be] offline, and displays only the following short message: ‘The website for AFTS and all related payment processing website [sic] are unavailable due to technical issues. We are working on restoring them as quickly as possible.’”

The complaint alleges that companies should by now anticipate these kinds of attacks and make sure that their security is adequate to protect any sensitive data that they store. The complaint quotes a Business Insider article on the subject of data breaches as saying, “Data breaches are on the rise for all kinds of businesses, including retailers …. Many of them were caused by flaws in … systems either online or in stores.”

Even so, the complaint alleges, AFTS did not take the necessary measures to protect its systems: “AFTS’s security flaws run afoul of industry best practices and standards. Had AFTS maintained its information technology systems, adequately protected them, and had adequate security safeguards in place, it could have prevented the Data Breach.”

Furthermore, the complaint claims, “Industry experts are clear that a data breach is indicative of data security failures. Indeed, industry-leading research and advisory firm Aite Group has identified that: ‘If your data was stolen through a data breach that means you were somewhere out of compliance’ with payment industry data security standards.”

Article Type: Lawsuit
Topic: Privacy

Most Recent Case Event

Automatic Funds Transfer Services Vehicle Info Exposure Complaint

February 19, 2021

Yet another company is being sued for failing to protect information from a ransomware attack. This time, the defendant is Automatic Funds Transfer Services, Inc. (AFTS). The complaint says that this time the information exposed includes names, addresses, license plate numbers, vehicle identification numbers, for possibly as many as 38 million people.

Automatic Funds Transfer Services Vehicle Info Exposure Complaint

Case Event History

Automatic Funds Transfer Services Vehicle Info Exposure Complaint

February 19, 2021

Yet another company is being sued for failing to protect information from a ransomware attack. This time, the defendant is Automatic Funds Transfer Services, Inc. (AFTS). The complaint says that this time the information exposed includes names, addresses, license plate numbers, vehicle identification numbers, for possibly as many as 38 million people.

Automatic Funds Transfer Services Vehicle Info Exposure Complaint
Tags: Exposing Private Information, Exposure to cyber crime, Your Privacy