fbpx

Wilderness Sports Warehouse Accessing of Customers’ PII Class Action

This class action takes up an all-too-present topic—a data breach. It brings suit against Wilderness Sports Warehouse, LLC (which does business as Tackle Warehouse, LLC0; Sports Warehouse, Inc. (which does business as Tennis Warehouse, LLC); Running Warehouse, LLC; and Skate Warehouse, LLC. The complaint alleges that the companies are e-commerce companies that sell specialty sporting goods to customers online, due to the companies’ “negligent and/or careless acts and omissions and the failure to protect customers’ data.

The class for this action is all individuals in the US whose personally identifiable information (PII) was compromised in the data breach announced on or about December 16, 2021. A Maryland Subclass has also been proposed, for those living in Maryland.

On October 15, 2021, the complaint alleges, the companies became aware of the data breach when someone accessed payment card information from their websites, probably from an e-commerce platform they shared. The hackers stole customers’ PII, including names, addresses, payment card numbers and expiration dates, and payment card verification codes. Nearly two million customers were victims.

According to the complaint, the companies are responsible in at least three ways:

  • They did not adequately protect the PII.
  • They did not warn users of their inadequate protection.
  • They did not properly watch their websites and e-commerce platform for security problems and incidents.

The complaint quotes the Running Warehouse’s Privacy Policy as saying that the companies use “commercially reasonable ethical, physical, managerial, and technical safeguards to preserve the integrity and security of your personal information consistent with industry standards.”

However, the complaint also claims that the companies do not claim that they comply with the Payment Card Industry Data Security Standard (PCI DSS), which it says “is a requirement for businesses that store, process, or transmit payment card data.” According to the complaint, “[t]he PCI DSS defines measures for ensuring data protection and consistent security processes and procedures around online financial transactions. Businesses that fail to maintain PCI DSS compliance are subject to steep fines and penalties.”

Despite the fact that the data breach was discovered on October 15, 2021, the complaint alleges, the companies did not send out notices to the victims until around December 16, 2021. The investigation into the incident determined that the hackers had accessed information around October 1, two weeks before the intrusion was discovered.

The complaint alleges that the companies “failed to use encryption to protect sensitive information transmitted online, and unauthorized individuals accessed [the companies’] customers’ unencrypted, unredacted information…”

Finally, the complaint claims that the companies “have not offered [their] affected customers any identity protection services, which leaves affected customers unprotected from fraudulent activity stemming from the breach.”

Article Type: Lawsuit
Topic: Privacy

Most Recent Case Event

Wilderness Sports Warehouse Accessing of Customers’ PII Complaint

January 13, 2022

This class action takes up an all-too-present topic—a data breach. It brings suit against Wilderness Sports Warehouse, LLC (which does business as Tackle Warehouse, LLC0; Sports Warehouse, Inc. (which does business as Tennis Warehouse, LLC); Running Warehouse, LLC; and Skate Warehouse, LLC. The complaint alleges that the companies are e-commerce companies that sell specialty sporting goods to customers online, due to the companies’ “negligent and/or careless acts and omissions and the failure to protect customers’ data.

Wilderness Sports Warehouse Accessing of Customers’ PII Complaint

Case Event History

Wilderness Sports Warehouse Accessing of Customers’ PII Complaint

January 13, 2022

This class action takes up an all-too-present topic—a data breach. It brings suit against Wilderness Sports Warehouse, LLC (which does business as Tackle Warehouse, LLC0; Sports Warehouse, Inc. (which does business as Tennis Warehouse, LLC); Running Warehouse, LLC; and Skate Warehouse, LLC. The complaint alleges that the companies are e-commerce companies that sell specialty sporting goods to customers online, due to the companies’ “negligent and/or careless acts and omissions and the failure to protect customers’ data.

Wilderness Sports Warehouse Accessing of Customers’ PII Complaint
Tags: Exposing Private Information, Exposure to cyber crime, Your Privacy