Amerit Fleet Solutions Failed to Protect Employee Data from Hackers, Class Action Lawsuit Claims

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action alleges Amerit Fleet Solutions failed to protect the private data of more than 1,900 current and former employees during a cyberattack announced in April 2024.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 35-page data breach lawsuit says that Amerit, a California-based company that provides automotive fleet maintenance and repair services, detected in January of this year that an unauthorized third party had gained access to some of its computer systems and copied certain files stored therein.

Per the suit, the data breach compromised at least employees’ names, Social Security numbers, driver’s license details, financial account information and certain medical data.

The case alleges that Amerit negligently failed to maintain adequate cybersecurity protocols and properly train employees in data security. According to the complaint, this left the sensitive information in a “vulnerable position” and made it an “easy target[] for cybercriminals.”

Moreover, the filing relays that Amerit apparently has been unable to determine when the hack began.

“It is unknown for precisely how long the cybercriminals had access to [Amerit’s] network before the breach was discovered,” the lawsuit charges. “In other words, [Amerit] had no effective means to prevent, detect, stop, or mitigate breaches of its systems—thereby allowing cybercriminals unrestricted access to its current and former employees’ [personal identifiable information/protected health information].”

In addition, the suit condemns Amerit’s allegedly delayed notification of victims. Although the company purports to have discovered the incident in January 2024, it waited until late April of this year to distribute notice letters to impacted individuals, the case asserts.

As the complaint tells it, this delay deprived victims of the opportunity to promptly act to mitigate the consequences of the unauthorized disclosure of their data.

The lawsuit looks to represent anyone in the United States whose private information was compromised in the data breach discovered by Amerit in January 2024, including those who received notice of the breach.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.