fbpx

Bansley and Kiener Exposure of Sensitive Information Class Action

This class action brings suit against Bansley and Kiener, LLP (B&K), alleging it “failed to implement reasonable, adequate, and industry standard security measures on its IT network where it stored and maintained Sensitive Information. The complaint claims its failures led to a data breach that exposed the private information of tens of thousands of people.

The Nationwide Class for this action is all persons living in the US whose sensitive information was accessed and acquired by an unauthorized party in the data breach announced by B&K on or around November 30, 2021.

B&K’s business is providing CPA and advisory services, including accounting, tax, consulting, and assurance services, to businesses of all sizes, and does compliance work for benefit plans, such as health and pension plans. As part of this work, it has access to a good deal of private information.

The recent data breach exposed the full names and Social Security numbers of more than 274,000 people and the unsecured protected health information (PHI) of more than 70,000 people.

The data breach appears to have occurred between August 20 and December 1, 2020, with an unauthorized party accessing and stealing information from B&K’s computer systems. The complaint alleges that the company “identified an incident” involving the information on around December 10, 2020, three months after the data breach began.

However, the complaint alleges that B&K only recognized that data had been exfiltrated on May 24, 2021.

Its public announcements of the data breach was even more delayed, the complaint alleges: “Fifteen months after the Data Breach was discovered, [B&K] publicly acknowledged the data security incident to state attorneys general in late November 2021.” Also at or near the end of that month, the complaint alleges, “fifteen months after the Data Breach began and eleven months after the Data Breach was discovered … [B&K] began notifying affected individuals…”

The complaint claims that B&K has not explained why it took three months to notice the data breach or why it did not begin notifying those affected for fifteen months.

The complaint alleges that the data breach was B&K’s fault, claiming that B&K ignored the rights of those whose information it kept by “recklessly, and/or negligently failing to implement industry standard security measures or otherwise take adequate and reasonable measure to ensure protection of its data systems; by failing to disclose the material fact that [B&K] did not have adequate computer security systems and practices…; and by failing to take available steps to prevent and stop the breach from ever happening; and failing to monitor and detect the breach in a timely manner.”

Article Type: Lawsuit
Topic: Privacy

Most Recent Case Event

Bansley and Kiener Exposure of Sensitive Information Complaint

December 22, 2021

This class action brings suit against Bansley and Kiener, LLP (B&K), alleging it “failed to implement reasonable, adequate, and industry standard security measures on its IT network where it stored and maintained Sensitive Information. The complaint claims its failures led to a data breach that exposed the private information of tens of thousands of people.

Bansley and Kiener Exposure of Sensitive Information Complaint

Case Event History

Bansley and Kiener Exposure of Sensitive Information Complaint

December 22, 2021

This class action brings suit against Bansley and Kiener, LLP (B&K), alleging it “failed to implement reasonable, adequate, and industry standard security measures on its IT network where it stored and maintained Sensitive Information. The complaint claims its failures led to a data breach that exposed the private information of tens of thousands of people.

Bansley and Kiener Exposure of Sensitive Information Complaint
Tags: Exposing Private Information, Exposure to cyber crime, Your Privacy