fbpx

Kemper, Infinity Insurance Companies Data Breach Class Action

Data breaches happen all too often nowadays. The complaint for this class action brings suit against Kemper Corporation and its subsidiary, Infinity Insurance Company, for a data breach suffered by Infinity in December 2020. The complaint alleges that Infinity did not adequately protect the data in its charge.

The class for this action is all persons whose PII was compromised as a result of the cyberattack suffered by Infinity and discovered around December 26, 2020, and who were sent notice of the data breach.

Kemper is a leading specialized insurer, providing roughly 6.2 million policies for home, auto, life, health, and valuables insurance. Infinity, which Kemper acquired in 2018, offers auto, business, property, life, and umbrella insurance. Previously, it offered specialty, nonstandard auto insurance.

The two companies maintain a good deal of private and personally identifiable information (PII) on customers and prospective customers, including names, addresses, Social Security numbers, driver and vehicle information, and payment data, such as bank account or card numbers.

Both companies promise to safeguard the PII of customers. Kemper states on its website, “Kemper promises to keep your personal information safe and confidential.” It promises to share information with others only as permitted by law and only with the consent of the customer.

Infinity also promises to “take reasonable steps to protect personal information. …. These steps include computer equipment and system safeguards and secured files and buildings.”

They also promise, “We maintain physical, electronic, and procedural safeguards that comply with state and federal regulations to guard your personal information.”

Nevertheless, Infinity’s security people “detected indications of a potential security incident on December 26, 2020” and “identified brief, unauthorized access to files on certain company servers in [its] network on two days in December 2020.” The complaint quotes these lines from the Notice of Data Breach letter that came out on or about March 16, 2021, more than two and a half months after the data breach.

The complaint alleges that the companies “had obligations by contract, industry standards, common law, and representations made … to keep … Private Information confidential and to protect it from unauthorized access and disclosure.”

It also claims that the companies’ “data security obligations were particularly important given the substantial increase in cyber-attacks and/or data breaches in the banking/credit/financial services industry preceding the date of the breach.” The complaint then refers to 1,473 data breaches occurring in 2019, resulting in more than 164,000,000 records exposed. Of these data breaches, the complaint alleges that 108 were in the banking/credit/financial industry, containing over 100 million of those exposed records.

The complaint blames the companies for the data breach, alleging they did not follow the Federal Trade Commission (FTC) guidelines or industry standards for data protection.

Article Type: Lawsuit
Topic: Privacy

Most Recent Case Event

Kemper, Infinity Insurance Companies Data Breach Complaint

April 9, 2021

Data breaches happen all too often nowadays. The complaint for this class action brings suit against Kemper Corporation and its subsidiary, Infinity Insurance Company, for a data breach suffered by Infinity in December 2020. The complaint alleges that Infinity did not adequately protect the data in its charge.

Kemper, Infinity Insurance Companies Data Breach Complaint

Case Event History

Kemper, Infinity Insurance Companies Data Breach Complaint

April 9, 2021

Data breaches happen all too often nowadays. The complaint for this class action brings suit against Kemper Corporation and its subsidiary, Infinity Insurance Company, for a data breach suffered by Infinity in December 2020. The complaint alleges that Infinity did not adequately protect the data in its charge.

Kemper, Infinity Insurance Companies Data Breach Complaint
Tags: Exposing Private Information, Exposure to cyber crime, Your Privacy