Blue Bear Payment Platform Data Breach Class Action

Global Payments, Inc. and Active Network, LLC have a Blue Bear payment platform that the complaint for this class action says “is used by thousands of schools and districts across the United States.” Unfortunately, the Blue Bear system suffered a data breach in 2019. The complaint alleges that the companies failed to adequately protect private information and also did not report the data breach quickly enough for victims to respond promptly.

The National Class for this action is all persons in the US whose personal information was compromised as a result of the data breach. There is also a Utah Class and a Nevada Class for persons in those states whose personal information was compromised in the data breach.

The complaint says that the Blue Bear software platform and payment card environment included “school accounting software, a student management system, and an online school store…” Among the information exposed were credit and debit card numbers, expiration dates, security codes, and account user names and passwords.

The data breach took place between October 1 and November 13, 2019. However, the data breach was announced to the public only on December 30, nearly three months after the initial information exposure.

The complaint claims, “Unfortunately, the Notice sent to Data Breach victims and filed with various State Attorneys General contained very little detail about the Data Breach. This lack of detail made it more difficult for victims of the Data Breach to adequately respond to the Data Breach and protect themselves from fraud and identity theft.” The complaint says that the companies also “have not provided victims with any post-breach reports or findings that might aid them in dealing with the aftermath of the Data Breach.”

The complaint quotes the Notice Active sent to victims as saying, “As soon as we identified the suspicious activity, our counsel engaged a leading cybersecurity firm to investigate the incident and took steps to enhance its monitoring tools and security controls.” The complaint answers this rather sourly: “One may deduce that the referenced enhancements to [the companies’] monitoring tools and security controls were enhancements that could have and likely should have been in place before the Data Breach.”

The data breach, the complaint alleges, “was the inevitable result of [the companies’] inadequate data security measures and careless approach to data security.” The companies should have been put on notice, the complaint suggests, by news of the many other data breaches occurring at other companies, yet they “failed to ensure that they maintained adequate security measures to protect customer Personal Information from criminals.”

The complaint claims that all the companies offered victims was a year of credit monitoring, the bare minimum of what companies offer in such circumstances.

Article Type: Lawsuit
Topic: Privacy

Most Recent Case Event

Blue Bear Payment Platform Data Breach Complaint

April 13, 2020

Global Payments, Inc. and Active Network, LLC have a Blue Bear payment platform that the complaint for this class action says “is used by thousands of schools and districts across the United States.” Unfortunately, the Blue Bear system suffered a data breach in 2019. The complaint alleges that the companies failed to adequately protect private information and also did not report the data breach quickly enough for victims to respond promptly.

Blue Bear Payment Platform Data Breach Complaint

Case Event History

Blue Bear Payment Platform Data Breach Complaint

April 13, 2020

Global Payments, Inc. and Active Network, LLC have a Blue Bear payment platform that the complaint for this class action says “is used by thousands of schools and districts across the United States.” Unfortunately, the Blue Bear system suffered a data breach in 2019. The complaint alleges that the companies failed to adequately protect private information and also did not report the data breach quickly enough for victims to respond promptly.

Blue Bear Payment Platform Data Breach Complaint
Tags: Exposing Private Information, Exposure to cyber crime, Your Privacy