Applus Technologies Hit with Class Action Over Data Breach of State Vehicle Inspections, Emissions Testing Systems

New to ClassAction.org? Read our Newswire Disclaimer

The company responsible for managing inspections and emissions testing services for the Connecticut Department of Motor Vehicles faces a proposed class action in the wake of a late-March 2021 data breach. 

The 16-page lawsuit alleges defendant Applus Technologies has betrayed the trust of proposed class members by failing to properly safeguard and protect their personally identifiable information (PII), including names, addresses, birth dates, PINs and Social Security, driver’s license and license plate numbers.

According to the complaint, Applus has yet to disclose the specific type of malware used in the breach, which the company claims to have learned of around March 31. In response to the attack, Applus shut down its vehicle emissions testing programs in eight states, including Connecticut, and recommended that the public monitor their financial accounts for any unauthorized activity, the case says. Per the suit, Applus announced after the breach that it had retained computer forensics experts to analyze the incident and determine the extent of any damage. 

The lawsuit surmises that the confidential information accessed in the malware attack was likely compromised and stolen. 

Applus, the suit alleges, failed to take reasonable steps to adequately protect the PII with which it was entrusted. The information is “now readily available on the internet for anyone to acquire, access, and use for unauthorized purposes for the foreseeable future,” the case stresses: 

“Indeed, Applus’ failure to implement and follow basic security procedures has resulted in ongoing harm to Plaintiffs and Class members who will continue to experience a lack of data security for the indefinite future and remain at serious risk of identity theft and fraud that would result in significant monetary loss and loss of privacy.” 

Vehicle inspections and emissions testing in Connecticut resumed on April 27 while Applus reported that it was still investigating the scope of the malware attack, the case says. 

The lawsuit argues that Applus, given the size and scope of the information it collects and maintains, and the prevalence of cyberattacks on similar entities, should have foreseen that it could be the target of a security threat. 

The suit looks to represent all persons residing in Connecticut whose personally identifiable information was compromised in the data breach initially disclosed by Applus on or about March 30, 2021. 

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.