fbpx

Hamilton Beach Credit Card “Scraping” Data Breach Class Action

Hamilton Beach Brands, Inc. makes home and kitchen appliances that it sells through retail stores and also through its website. This class action concerns data breach it experienced between December 2020 and February 2021, which the complaint alleges occurred because the company did not adequately protect its customers’ personally identifying information (PII).

The Nationwide Class for this action is all individuals whose PII was compromised in the data breach announced by Hamilton Beach on April 9, 2021.

In its Privacy Policy, Hamilton Beach claims its website is secure: The company “believe[s] that privacy is important and we are committed to maintaining the trust of our customers and our online guests.” It claims to “use reasonable security measures,” which “may include encryption, security certificates, access controls, information security technologies, policies, procedures and other information security measures…”

Hamilton Beach notified customers of the data breach beginning on April 9, 2021. The actual data breach ran from December 18, 2020 to February 4, 2021.

The complaint alleges, “Hackers not only ‘scraped’ many of Hamilton Beach’s customers’ names from [Hamilton Beach’s] website by infecting the ecommerce platform with malware, hackers also stole customers’ payment card numbers, CVV security codes, credit card expiration dates, addresses, telephone numbers and e[-]mail addresses…”

The PII was compromised, the complaint claims, “due to [Hamilton Beach’s] negligent and/or careless acts and omissions and the failure to protect customers’ data.”

The complaint cites three particular failures on Hamilton Beach’s part:

  • Failure to “adequately protect its users’ PII,”
  • Failure to “warn users of its inadequate information security practices, and”
  • Failure to effectively monitor [Hamilton Beach’s] websites and ecommerce platforms for security vulnerabilities and incidents.”

Hamilton Beach’s conduct, the complaint claims, “amounts to negligence and violates federal and state statutes.”

The complaint cites an FBI warning issued in 2019, before Hamilton Beach was hacked, Oregon FBI Tech Tuesday: Building a Digital Defense Against E-Skimming. That publication gave information on “e-skimming techniques” and measures that businesses could take to protect themselves.

The complaint alleges that Hamilton Beach did not take these measures, as its data breach was accomplished at least in part by scraping or skimming information. It says, “Web scraping or skimming data breaches are commonly made possible through a vulnerability in a website or its backend content management system.”

The plaintiff in this case, Carrie Coval-Burt, had five unauthorized purchases made on her credit card during the February and March directly after the data breach.

According to the complaint, Hamilton Beach had a data breach in 2011 as well

Article Type: Lawsuit
Topic: Privacy

Most Recent Case Event

Hamilton Beach Credit Card “Scraping” Data Breach Complaint

April 26, 2021

Hamilton Beach Brands, Inc. makes home and kitchen appliances that it sells through retail stores and also through its website. This class action concerns data breach it experienced between December 2020 and February 2021, which the complaint alleges occurred because the company did not adequately protect its customers’ personally identifying information (PII).

Hamilton Beach Credit Card “Scraping” Data Breach Complaint

Case Event History

Hamilton Beach Credit Card “Scraping” Data Breach Complaint

April 26, 2021

Hamilton Beach Brands, Inc. makes home and kitchen appliances that it sells through retail stores and also through its website. This class action concerns data breach it experienced between December 2020 and February 2021, which the complaint alleges occurred because the company did not adequately protect its customers’ personally identifying information (PII).

Hamilton Beach Credit Card “Scraping” Data Breach Complaint
Tags: Exposing Private Information, Exposure to cyber crime, Your Privacy