EasyCash ASAP Access to Personal Information Class Action

We’ve become used to seeing class actions suing businesses for inadequately protecting personal information. But what should be done about businesses that make customer information all too available to any random person who fishes for it? This class action brings suit against ACQ Holdings, LLC—which does business under the names of Easy Cash ASAP, LLC and easycashasap.com—for making private customer information available to any person who might enter a random seven-digit account number at its site.

The Data Breach Class is all persons who, at any time after August 31, 2014, provided their personal financial information to ACQ on its website to support their loan application.

Plaintiff Kevin M. Traver had no idea that his information would be made so freely available when he entered it into the site. He’d received an e-mail advertising loan services through EasyCashASAP. The e-mail included a link to the website.

The landing page provided certain information about the company and the loans it makes. For example, it noted that EasyCashASAP was not a lender in all states, and that it was a brand owned by ACQ. The page also included an Apply button.

Traver clicked on the button and was taken to another page, where he was asked to input personal information, such as his Social Security Number, income, employer’s name, and bank information. Also on the page was a notice that, by using the site, Traver agreed “to the terms of use and privacy notice.” However, those terms were not on that page.

As part of the application process, Traver was assigned an account number. According to the complaint, the number is simply sequential with those of other applicants. “When an applicant clicks to review the application, the account number is found a public URL that immediately populates.”

What does this mean, in practical terms? “Anyone can type [a] random seven[ ]digits into this public URL feature and—if it happens that those seven digits are assigned as an account number to a loan applicant—then the person entering the random digits has access to the loan applicant’s name; date of birth; address; Social Security number; home phone number; cell phone number; e[-]mail address; employer name and phone number; next pay date and pay frequency; monthly income; bank name; bank account type; bank routing number; bank account number; and military status.”

The complaint points out that this information can easily be used bank, credit, or identity fraud “and worse.”

Naturally, once Traver realized how easily someone could get hold of his information, he wanted to remove his information. However, the complaint says, “there is no way to remedy the problem. Traver tried, but was unable, to remove the private financial information he [had] provided to ACQ to support his loan application.”

Article Type: Lawsuit
Topic: Privacy

Most Recent Case Event

EasyCash ASAP Access to Personal Information Class Action

August 31, 2020

We’ve become used to seeing class actions suing businesses for inadequately protecting personal information. But what should be done about businesses that make customer information all too available to any random person who fishes for it? This class action brings suit against ACQ Holdings, LLC—which does business under the names of Easy Cash ASAP, LLC and easycashasap.com—for making private customer information available to any person who might enter a random seven-digit account number at its site.

EasyCash ASAP Access to Personal Information Class Action

Case Event History

EasyCash ASAP Access to Personal Information Class Action

August 31, 2020

We’ve become used to seeing class actions suing businesses for inadequately protecting personal information. But what should be done about businesses that make customer information all too available to any random person who fishes for it? This class action brings suit against ACQ Holdings, LLC—which does business under the names of Easy Cash ASAP, LLC and easycashasap.com—for making private customer information available to any person who might enter a random seven-digit account number at its site.

EasyCash ASAP Access to Personal Information Class Action
Tags: Exposing Private Information, Exposure to cyber crime, Your Privacy