fbpx

Canon Companies’ Employee Information Compromised Class Action

This data breach class action brings suit against a group of defendants for their “failure to properly secure and safeguard personally identifiable information that Defendants required from their employees as a condition of employment…” The defendants are a group of digital imaging companies, including Canon USA, Inc., Canon Solutions America, Inc. Canon Software America, Inc., and others.

The defendants in this case learned of the data breach, according to the complaint, on or before August 4, 2020. Unauthorized activity had taken place on their networks between July 20 and August 6, 2020. The intruder had gained access to files with the personally identifying information (PII) of current and former employees and their beneficiaries and dependents.

The companies issued an internal warning about the data breach on August 6, 2020 but it appears that the formal notice of the data breach was dated November 24, 2020.

The notice said, in part, “We identified a security incident involving ransomware on August 4, 2020. We immediately began to investigate, a cybersecurity firm was engaged, and measures were taken to address the incident and restore operations.”

The files contained information on those who were current and former employees between 2005 and 2020. According to the notice, the information exposed to the unauthorized activity included names, Social Security numbers, driver’s license or government-issued ID numbers, account numbers for the direct deposit of checks, dates of birth, and electronic signatures.

The complaint claims that the information was exposed due to the “negligent and/or careless acts and omissions” and the failure to properly protect the information. In addition, the complaint alleges that even after they had discovered the data breach, the companies “waited several months to report it to the states’ Attorneys General and affected individuals.”

The complaint alleges three major failures in connection with the data breach. These are failure to “(i) adequately protect the PII of their current and former employees and their beneficiaries and dependents; (ii) warn their current and former employees and their beneficiaries and dependents of their inadequate information security practices; and (iii) effectively secure hardware containing protected PII using reasonable and effective security procedures free of vulnerabilities and incidents.”

It adds the claim that “Defendants’ conduct amounts to negligence and violates federal and state statutes.” The counts include negligence and breach of contract, among other things.

The complaint defines a class and a subclass.

  • The Nationwide Class is all individuals whose PII was exposed in the data breach announced by the defendant companies on or around November 24, 2020.
  • The alternative Contracted Employees Subclass is all current and former employees of any of the defendant companies with contracts with any of the companies related to the PII exposed in the data breach announced by the companies on or around November 24, 2020.
Article Type: Lawsuit
Topic: Privacy

Most Recent Case Event

Canon Companies’ Employee Information Compromised Complaint

December 31, 2020

This data breach class action brings suit against a group of defendants for their “failure to properly secure and safeguard personally identifiable information that Defendants required from their employees as a condition of employment…” The defendants are a group of digital imaging companies, including Canon USA, Inc., Canon Solutions America, Inc. Canon Software America, Inc., and others.

Canon Companies’ Employee Information Compromised Complaint

Case Event History

Canon Companies’ Employee Information Compromised Complaint

December 31, 2020

This data breach class action brings suit against a group of defendants for their “failure to properly secure and safeguard personally identifiable information that Defendants required from their employees as a condition of employment…” The defendants are a group of digital imaging companies, including Canon USA, Inc., Canon Solutions America, Inc. Canon Software America, Inc., and others.

Canon Companies’ Employee Information Compromised Complaint
Tags: Exposing Private Information, Exposure to cyber crime, Your Privacy