Exposing Private Information

Deloitte Pandemic Unemployment Assistance Portal Data Breach Class Action

Recently, new routes have had to be established to access distribute funds intended for relief from Covid-19 effects. Deloitte Consulting, LLP is helping some state agencies to administer the federal Pandemic Unemployment Assistance program (PUA). However, the complaint alleges that the company’s systems allowed public access to personally identifiable information (PII) entered there, including Social  Read more

MGM Resorts International Data Breach Class Action

In February 2020, MGM Resorts International announced that cybercriminals had gained access to its systems in mid-2019 and had stolen personally identifiable information (PII) for more than 10.6 million of its hotel guests. This data breach, the complaint for this class action alleges, “was a direct result of MGM’s failure to implement adequate and reasonable  Read more

Stein Mart Cyberattack Reimbursement Settlement

Stein Mart, Inc. and Social Annex, Inc. (which does business as Annex Cloud) are settling a class action resulting from a cyberattack on their computer systems. The complaint claimed that the companies were responsible for the security breach, which may have resulted in the exposure of payment card data and other personal information.  Read more

Zoom Sharing of Personal Information with Third Parties Class Action

With most states having some kind of stay-at-home orders in place to decrease the spread of Covid-19, many people are working from home. To facilitate meetings, a video conferencing platform called Zoom has become popular. But the complaint for this class action alleges that Zoom Video Communications, Inc., the company behind it, collects personal information  Read more

Personal Touch, Crossroads PHI Ransomware Attack Class Action

Personal Touch Holding Corporation, a holding company for home health care entities, stores patient information, including Protected Health Information (PHI) and personally identifiable information (PII), in the cloud with Crossroads Technologies, Inc. Unfortunately, Crossroads was subjected to a ransomware attack in late 2019 which encrypted its files. The complaint for this class action alleges that  Read more

Walgreen Data Breach Exposed PII and PHI Class Action

As the second-largest US pharmacy chain, Walgreens Company possesses a large amount of private information on its customers. But the complaint for this class action alleges that Walgreen does not take proper measures to keep this information secure, resulting in a 2019 data breach of its systems.  Read more

Blue Bear Payment Platform Data Breach Class Action

Global Payments, Inc. and Active Network, LLC have a Blue Bear payment platform that the complaint for this class action says “is used by thousands of schools and districts across the United States.” Unfortunately, the Blue Bear system suffered a data breach in 2019. The complaint alleges that the companies failed to adequately protect private  Read more

American HomePatient Data Breach Settlement

American HomePatient, Inc. (AHOM) and Lincare Holdings, Inc. (LHI) are settling a class action stemming from an incident where a burglar stole computers from AHOM’s facility in Newark, Delaware. The computers may have contained personally identifiable information (PII) such as AHOM account information, Social Security numbers, diagnosis codes, treatment information, and financial information. The allegations  Read more

Nuvance Health, Health Quest Phishing Attack Class Action

Nuvance Health and Health Quest Systems, Inc., the defendants in this case, operate healthcare facilities, including seven hospitals, in the Hudson Valley area of New York and western Connecticut. The complaint for this class action alleges that a phishing incident at these companies exposed the information of more than 28,000 patients, because the companies “failed  Read more

Tandem Diabetes Care Data in Phishing Incident Class Action

The complaint for this class action begins by referring to California’s Confidentiality of Medical Information Act (CMIA). The issue in the case is the disclosure of information held by Tandem Diabetes Care, Inc. (TDC) in a phishing incident. The complaint claims that TDC is responsible for this disclosure brings suit on behalf of patients nationwide  Read more