Liberty Mutual class action claims ransomware attack exposed customer data

Liberty Mutual class action lawsuit overview:

• Who: Two policyholders filed a class action lawsuit against Liberty Mutual Insurance Co.
• Why: Liberty Mutual allegedly failed to safeguard policyholders’ sensitive information, which was exposed in a recent ransomware attack.
• Where: The Liberty Mutual data breach class action lawsuit was filed in Massachusetts federal court.

Liberty Mutual Insurance is facing a class action lawsuit alleging it failed to safeguard sensitive information belonging to more than 15,000 policyholders that was exposed in a recent ransomware attack.

Plaintiffs Robert Francis and John Goodwin claim Liberty Mutual failed to protect their personally identifiable information and protected health information, which was reportedly exfiltrated by “a notorious criminal ransomware group” known as Everest.

“Plaintiffs have since discovered that Everest has added [Liberty Mutual] to its dark web leak site, where their private information, including their highly sensitive medical records, may be posted for any nefarious actor to view, download and use to commit crimes against plaintiffs and class members, including identity theft and fraud,” the Liberty Mutual class action lawsuit says.

Francis and Goodwin want to represent a nationwide class and Massachusetts subclass of consumers whose private information was compromised in the Liberty Mutual data breach.

Liberty Mutual failed to encrypt or redact private information, plaintiffs say

Francis and Goodwin argue Liberty Mutual failed to encrypt or redact the sensitive information, which they claim was compromised due to the company’s “negligent and/or careless acts and omissions and its utter failure to protect its clients’ sensitive data.”

“The present and continuing risk to victims of the data breach will remain for their respective lifetimes,” the Liberty Mutual class action lawsuit says.

Francis claims he began experiencing spam, scam and phishing text messages and phone calls soon after the Liberty Mutual data breach, while Goodwin alleges fraudulent charges were made to his checking account.

Francis and Goodwin claim Liberty Mutual is guilty of negligence, negligence per se, breach of implied contract, unjust enrichment, invasion of privacy and violations of the Massachusetts Consumer Protection Act and the Declaratory Judgment Act.

The plaintiffs demand a jury trial and request declaratory and injunctive relief and an award of actual, statutory, exemplary and punitive damages for themselves and all class members.

Last year, Liberty Mutual faced a class action lawsuit alleging it made illegal robocalls to consumers without their consent.

What do you think of the allegations made in this Liberty Mutual data breach class action lawsuit? Let us know in the comments.

The plaintiffs are represented by Casondra Turner of Milberg PLLC and Raina Borrelli of Strauss Borrelli PLLC.

The Liberty Mutual data breach class action lawsuit is Francis, et al. v. Liberty Mutual Insurance Co., Case No. 1:26-cv-12056, in the U.S. District Court for the District of Massachusetts.

Read About More Class Action Lawsuits & Class Action Settlements:

• TD Bank, ARC sued over alleged sale of travelers’ financial, flight data to federal agencies
• Amazon accused of using Fire TV to spy on viewing habits for advertising profits
• Bayer recalls Afrin nasal spray over child-proof packaging safety concerns
• JetBlue class action alleges airline uses consumer data to set ticket prices