Exposing Private Information

Five Below Data Breach Settlement

Five Below, Inc. is settling a class action alleging it is responsible for exposure of customer information in a cyberattack on the system it uses for payments on its online website. The cyberattack included security incident(s) on August 14 and 28, 2018, approximately September 18-19, 2018, and November 13, 2018 through January 11, 2019. According  Read more

Morgan Stanley Unauthorized Exposure of Customer PII Class Action

This class action brings suit against Morgan Stanley Smith Barney, LLC, for its alleged failure to safeguard customers’ personal identifiable information (PII). The complaint alleges that the company disclosed, without authorization, customer names, Social Security numbers, passport numbers, and other information, then did not provide timely, adequate or accurate notice about the loss of their  Read more

Apple and T-Mobile Allowed Access to Others’ Accounts Class Action

We want to believe that our personal devices are secure. But this class action brings suit against two major companies, Apple, Inc. and T-Mobile USA, Inc., alleging that each one permitted flaws in its systems that have allowed the disclosure of consumers’ information to third parties.  Read more

Truluck’s Restaurants Data Breach Settlement

This settlement resolves a class action against Truluck’s Restaurant Group, Ltd. and others for a data breach relating to a cyberattack on point-of-sale systems at Truluck’s restaurants. The complaint alleged that Truluck’s did not take adequate measures to safeguard customers’ data, including payment card information.  Read more

InterContinental Hotels Data Security Incident Settlement

InterContinental Hotels Corporation and InterContinental Hotels Group Resources, Inc. are settling a class action alleging that the companies are responsible for a malware intrusion into the systems of its hotels, bars, and restaurants. The hotel brands involved include InterContinental, Holiday Inn, Holiday Inn Express & Suites, Candlewood Suites, Crowne Plaza, Staybridge Suites, and Hotel Indigo.  Read more

Zynga Exposure of Users’ PII Class Action

Zynga, Inc. had approximately 173 million separate accounts on the date of its recent data breach, September 12, 2019. The complaint for this class action claims that it’s bringing suit against the company “to secure redress against Zynga for their reckless and negligent violations of customer privacy rights” in connection with the data breach.  Read more

Deloitte State Unemployment Portals Data Breach Class Action

As part of the federal government’s Pandemic Unemployment Assistance (PUA) program, rules for unemployment payments have temporarily changed. Deloitte Consulting, LLP contracted with a number of states to set up portals to administer the program. Unemployed individuals may use these portals to apply for unemployment payments and communicate with the officials for their state. Unfortunately,  Read more

Zoom Inadequate Security for Users Class Action

The Covic-19 pandemic and related stay-at-home orders has led to an explosion of use of the Zoom Video Communications, Inc. platform. The complaint for this class action reports, “The number of meeting participants across Zoom has jumped from 10 million in December 2019 to 200 million in March 2020.” The complaint alleges that Zoom does  Read more

Deloitte Pandemic Unemployment Assistance Portal Data Breach Class Action

Recently, new routes have had to be established to access distribute funds intended for relief from Covid-19 effects. Deloitte Consulting, LLP is helping some state agencies to administer the federal Pandemic Unemployment Assistance program (PUA). However, the complaint alleges that the company’s systems allowed public access to personally identifiable information (PII) entered there, including Social  Read more

MGM Resorts International Data Breach Class Action

In February 2020, MGM Resorts International announced that cybercriminals had gained access to its systems in mid-2019 and had stolen personally identifiable information (PII) for more than 10.6 million of its hotel guests. This data breach, the complaint for this class action alleges, “was a direct result of MGM’s failure to implement adequate and reasonable  Read more