Norwex class action claims data breach exposed personal identifying info

Norwex data breach class action overview: 

• Who: A Norwex employee is suing the company.
• Why: The plaintiff claims the company’s negligence led to a data breach that exposed current and former employees’ information.
• Where: The Norwex class action was filed in a Texas federal court.

Norwex USA Inc. has been hit with a class action lawsuit following a data breach that exposed the personal information of its employees and job applicants.

Plaintiff Keshia Field filed the class action complaint against Norwex USA Inc. on Jan. 2 in a Texas federal court, alleging violations of state and federal consumer laws.

Field claims in the lawsuit that Norwex failed to properly secure and safeguard sensitive personal identifiable information, including names, dates of birth, driver’s licenses, payroll information, and Social Security numbers.

“Defendant failed to adequately protect Plaintiff’s and Class Members PII––and failed to even encrypt or redact this highly sensitive information,” the Norwex data breach lawsuit states.

The lawsuit claims that Norwex’s negligence led to the data breach, and that hackers were able to target and obtain the data due to its value in exploiting and stealing the identities of the victims. 

“The present and continuing risk of identity theft and fraud to victims of the Data Breach will remain for their respective lifetimes,” the Norwex data breach lawsuit says.

Norwex did not properly inform consumers of breach, lawsuit claims 

Norwex began notifying affected individuals of the data breach on Dec. 23, 2024, Field’s lawsuit says. However, the notice letter did not disclose the identity of the cybercriminals who perpetrated the breach, the details of the root cause of the breach or the remedial measures undertaken to ensure such a breach does not occur again, according to the lawsuit.

The lawsuit claims that Norwex’s “disclosure” amounts to no real disclosure at all, as it fails to inform, with any degree of specificity, the victims of the data breach’s critical facts.

As a result, Field is looking to represent anyone in the United States who was affected by the breach. She is suing for negligence and breach of implied contract and is seeking certification of the class action, damages, fees, costs and a jury trial.

Meanwhile, Norwex is facing another class action lawsuit alleging it sends consumers illegal unsolicited and prerecorded telemarketing messages and calls without receiving the required express written consent.

What do you think of the allegations in this Norwex class action? Let us know in the comments.

The plaintiff is represented by Bruce Steckler of Steckler, Wayne, & Love PLLC and John J. Nelson of Milberg Coleman Bryson Phillips Grossman PLLC.

The Norwex class action lawsuit is Keshia Field v. Norwex USA Inc., Case No. 3:25-cv-00002-D in the U.S. District Court for the Northern District of Texas.

Read About More Class Action Lawsuits & Class Action Settlements:

• American Addiction Centers data breach affected 400K+, class action claims
• Amazon faces recent class actions, recalls, data breach
• Chinese hackers breach US Treasury workstations
• RIBridges data breach impacts those who received state assistance, class action claims