U-Haul class action accuses company of neglect that led to data breach

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

U-Haul data breach class action overview: 

• Who: A U-Haul customer is suing the company. 
• Why: The plaintiff says the company allowed customer information to be exposed in a data breach. 
• Where: The U-Haul data breach class action was filed in an Arizona federal court.

U-Haul didn’t adequately protect its computer systems, leading to cybercriminals obtaining the personal information of customers in a data breach, a new class action lawsuit alleges. 

Plaintiff Chris Bagley filed the class action lawsuit against U-Haul International Incorporated Sept. 22 in an Arizona federal court, alleging negligence, unjust enrichment, breach of contract and violations of the Driver’s Privacy Act.

According to the lawsuit, the hack started on Nov. 5, 2021, and continued for seven months through April 5, 2022, leaking personal information including names, dates of birth and driver’s license numbers.

The hackers accessed two passwords used to control U-Haul’s systems, the U-Haul class action states. That gave them access to personal information that has “been used and will continue to be used in a variety of sordid ways for criminals to exploit Plaintiff and the Class members and to profit off their misfortune,” the lawsuit alleges.

U-Haul class action claims company lacked security practices

U-Haul did not have proper security practices in place to safeguard its customers’ personal information and failed to provide timely and adequate notice of the breach, Bagley alleges. 

He says he was not advised of the U-Haul data breach until September 2022. 

It was only earlier this month that U-Haul International disclosed that it was the victim of the data breach that exposed the names and driver’s license information of some of its customers. 

As a result, Bagley and other customers  face an impending identity theft risk, he says. 

“This risk will continue for the rest of their lives, as Plaintiff and Class members are now forced to deal with the danger of identity thieves possessing and using their Personal Information,” the U-Haul class action states.

Bagley looks to represent any U-Haul customer affected by the breach. 

He seeks an injunction requiring U-Haul to improve its data security systems and protocols and conduct future annual audits and pay for credit-monitoring services for affected customers. He’s also seeking certification of the class action, damages, fees, costs and a jury trial. 

Were you impacted by the U-Haul data breach? Let us know your thoughts on this class action in the comments! 

Chris Bagley is represented by Rory Brian Riley of Morgan & Morgan and William B. Federman of Federman & Sherwood.

The U-Haul data breach class action lawsuit is Bagley v. U-Haul International Incorporated, Case No. 2:22-cv-01608, in the United States District Court for the District Of Arizona.

Read About More Class Action Lawsuits & Class Action Settlements:

• T-Mobile data breach $350M class action settlement
• Data breach class action lawsuits accuse companies of not guarding consumer info
• ClearBalance data breach $2.65M class action settlement
• SN Servicing Corp. data breach $900K class action settlement