Data breach class action lawsuits accuse companies of not guarding consumer info

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

Data breach class action lawsuits overview: 

• Who: Consumers have filed a number of recent data breach class action lawsuits against companies — including Lamoille, KeyBank, Cash App and Block, among others — over claims the companies have failed to protect their information from data breaches. 
• Why: Consumers’ class actions argue the companies should have done more to safeguard their sensitive data from falling into the hands of cyber criminals carrying out a data breach. 
• Where: Nationwide.

Consumers who have had their personal information exposed and/or compromised in a data breach have been filing class action lawsuits accusing companies of not doing enough to properly safeguard their private details. 

A number of companies facing data breach class actions have recently fallen victim to breaches that are often the result of a cybersecurity issue or vulnerability taken advantage of by a single bad actor or coordinated hacking group. 

Consumers who have their personally identifiable information exposed in a data breach may be at a greater risk of falling victim to identity theft or other adverse activity which may affect their finances or privacy. 

Lamoille accused of being negligent with protecting patient data

A patient filed a class action lawsuit against Vermont’s Lamoille Health Partners earlier this month over allegations the healthcare provider was negligent in protecting the data of its patients. 

The individual behind the complaint argued Lamoille’s allegedly relaxed data security policies allowed hackers to access her and more than 59,000 other patient’s highly sensitive information. 

“Defendant maintained the Private Information in a reckless manner,” the Lamille class action states. 

KeyBank alleged to have insufficient cybersecurity policies

Among other data breach class action lawsuits, KeyBank has been accused of bearing responsibility for a July data breach against the company on account of its allegedly insufficient cybersecurity policies. 

The consumer behind the class action lawsuit argued KeyBanks’ cybersecurity practices were “insufficient and unreasonable” and that the financial institution held responsibility for the data breach. 

“The criminals gained unauthorized access by thwarting, circumventing and defeating Defendants’ unreasonably deficient data security measures and protocols,” the KeyBank class action states. 

Nelnet facing accusations of blame for August data breach

Nelnet, meanwhile, also faced a complaint this month alleging the student loan provider failed to protect the personally identifiable information of more than 2.5 million borrowers during a data breach announced by the company in August. 

The consumer behind the Nelnet class action argues further that the lender also “failed to provide timely, accurate and adequate notice” to student loan borrowers who had their information exposed in the breach. 

“Current and former borrowers’ knowledge about what PII Nelnet lost … was unreasonably delayed by Nelnet’s unreasonable notification delay after it first learned of the data breach,” the Nelnet class action states. 

Cash App, Block accused of failing to protect info of 8.2 million users

A similar class action lawsuit was also filed against Block and Cash App last month by a pair of consumers arguing the companies failed to protect the private information of their customers during a data breach in December 2021. 

The consumers behind the class action lawsuit claim Block and Cash App’s alleged failure to protect their information led to 8.2 million users having their information exposed, which they argue compromised the security of their financial accounts. 

“The security of Defendants’ customers’ Private Information is accordingly of the utmost importance,” the Block and Cash App class action states.  

OPM agrees to pay $63 million over claims it failed to safeguard customer data

Complaints revolving around data breaches have also led to a number of recent class action settlements, with companies agreeing to pay up to resolve claims they failed to properly safeguard customer data. 

Office of Personnel Management and its company Peraton agreed to pay $63 million earlier this month in order to put to bed allegations they compromised the personal information of their federal government employees and contractors. 

OPM and Peraton were also accused of allowing the information of certain applicants for federal employment to become compromised in multiple data breaches which occurred between 2013 and 2015. 

PrimoHoagies comes to agreement to resolve claims it failed to protect customer data 

Also this month, PrimoHoagies came to an agreement on a class action settlement made to end claims the company failed to protect the data of its customers during a data breach between 2019 and 2020. 

The class action settlement will benefit PrimoHoagies customers who used their payment card information in order to make a purchase from the company during the time the data breach was ongoing. 

PrimoHoagies announced it had fallen victim to a data breach in April 2020, at which time the company offered both credit monitoring services and identity theft protection to any affected customers. 

Humana settles claims related to its handling of 2020 data breach

Humana, meanwhile, agreed to a class action settlement last month in order to resolve claims surrounding its handling of patient data during a 2020 data breach. 

The class action settlement will benefit consumers who were notified by Humana that both their personal and health information may have been compromised in a data breach that stretched between Oct. 12 and Dec. 16, 2020. 

Around 65,000 of Humana’s patients reportedly had their personally identifiable information exposed in the data breach. 

AspenPointe agrees to pay $1.3 million to resolve claims it failed to protect data 

Also last month, AspenPointe agreed to pay $1.3 million as a way to end accusations the company failed to protect the data of its customers from being compromised in a 2020 data breach.  

Consumers who had their full names or other personally identifiable information exposed in the data breach — which occurred between Sept. 12 and 22, 2020 — are poised to benefit from the class action settlement. 

AspenPointe, a non-profit mental health center that changed its name to Diversus Health in 2021, sent out notification letters in November 2020 informing consumers their information may have been exposed in the data breach. 

A number of other companies have recently fallen victim to data breaches which exposed sensitive customer information, including LastPass, DoorDash, Signal and Cisco.

Do you believe you may qualify for a data breach class action settlement? Check here to see if any open class action settlements apply to you. 

Read About More Class Action Lawsuits & Class Action Settlements:

• SN Servicing Corp. data breach $900K class action settlement
• San Francisco 49ers data breach affects 20K fans
• Samsung class action alleges data breach compromised personal information of customers
• ClearBalance data breach class action settlement