Consumers hit Norwex, PowerSchool with data breach class actions

Data breach class action lawsuits overview: 

• Who: Consumers, employees and patients recently filed class actions against Rivers Casino Philadelphia, PowerSchool Holdings, Visionworks, Norwex USA and American Addiction Centers. 
• Why: The class action lawsuits involve data breaches. 
• Where: The data breach class action lawsuits were filed in U.S. federal courts. 

Consumers, employees and patients recently filed class action lawsuits against companies over recent data breach incidents. 

These companies include Rivers Casino Philadelphia, Norwex USA PowerSchool Holdings, Visionworks and American Addiction Centers. 

The class action lawsuits allege the companies failed to protect sensitive information, resulting in data breaches. 

Rivers Casino responsible for data breach, class action says

An employee of Rivers Casino Philadelphia filed a class action lawsuit against the operators of the casino earlier this month, claiming it bears responsibility for a November 2024 data breach.

The class action lawsuit argues the data breach exposed employee information and that Rivers Casino did not publicly disclose the incident until more than a month later on Dec. 30. 

“Defendants failed to take precautions designed to keep individuals’ private information secure,” the Rivers Casino class action says.

The lawsuit claims the data breach exposed Rivers Casino employees’ names, Social Security numbers and direct deposit bank account details.

Class action claims PowerSchool failed to safeguard data 

Consumers filed a pair of class action lawsuits against PowerSchool Holdings this month over claims the cloud-based education system software provider is responsible for a December 2024 data breach.

The class action lawsuits argue PowerSchool failed to adequately safeguard the personally identifiable information of millions of students, parents and school faculty during the data breach. 

“Plaintiff’s and class members’ private information was compromised through disclosure to an unknown and unauthorized third party — an undoubtedly nefarious third party seeking to profit off this disclosure by defrauding plaintiff and class members in the future,” one of the PowerSchool class actions says.

Visionworks negligent with data prior to data breach, class action says

A consumer filed a class action lawsuit against Visionworks last month over claims the optical retail chain was negligent with consumer data, resulting in an October 2024 data breach. 

The class action lawsuit argues Visionworks failed to implement adequate security measures to protect its systems. 

“Due to the defendant’s negligence, cybercriminals obtained everything they needed to commit identity theft and wreak havoc on the financial and personal lives of thousands of individuals,” the Visionworks class action says. 

The consumer claims the data breach exposed the sensitive personal and health information of nearly 40,000 individuals. 

Class action says Norwex negligent prior to data breach

An employee of Norwex USA filed a class action lawsuit against the cleaning and personal care product company over claims its negligence led to a December 2024 data breach. 

The class action lawsuit argues Norwex failed to properly safeguard and secure the sensitive PII of current and former employees, leading to the exposure of their names, dates of birth, driver’s licenses, payroll information and Social Security numbers.

“Defendant failed to adequately protect plaintiff’s and class members’ PII––and failed to even encrypt or redact this highly sensitive information,” the Norwex class action says.

American Addiction Centers bears responsibility for data breach, class action says

A pair of American Addiction Centers patients filed a class action lawsuit against the treatment center in late December over claims it bears responsibility for a September 2024 data breach. 

The class action lawsuit argues American Addiction Centers failed to secure the personal health information and medical information of more than 422,000 individuals, leading to exposure of names, Social Security numbers and health insurance details. 

“Defendant disregarded the rights of representative plaintiffs and class members by intentionally, willfully, recklessly and/or negligently failing to take and implement adequate and reasonable measures to ensure that representative plaintiffs’ and class members’ PHI/PII was safeguarded,” the American Addiction Centers class action says.

The patients claim American Addiction Centers also waited nearly three months to inform those affected by the data breach. 

Have you been affected by a recent data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• Google, YouTube must face children’s data collection claims
• Paramount seeks dismissal of data-sharing class action
• Jelly Belly class action over unsolicited texts dismissed
• Texas files Allstate data privacy lawsuit over ‘driving behavior’ database