Camping World Hit with Class Action Over 2022 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action alleges Camping World Holdings, Inc. and several affiliates, including Good Sam, are responsible for a month-long data breach in 2022 that compromised the personal, financial and health information of more than 30,000 current and former employees and customers.

The 33-page lawsuit claims Camping World, which describes itself as “America’s largest retailer of RVs and related products and services,” made itself an “easy target” for cybercriminals in January of this year by failing to adequately maintain appropriate cybersecurity protocols to safeguard consumers’ and employees’ sensitive data. The filing also charges that the company neglected to adequately train its employees on reasonable cybersecurity practices.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

According to the complaint, Camping World’s negligence has compromised consumers’ and employees’ Social Security numbers; names; addresses; driver’s license, government-issued ID,  passport and state ID numbers; financial information; financial account specifics; credit and debit card numbers; and health insurance and medical information.

The case says that the breach occurred between January 14 and February 13, and stresses that an “unknown third party” had proposed class members’ data in its hands for nearly a month before Camping World realized it had been hacked.

“This delay shows that Defendant had no effective means to prevent, detect, stop, and mitigate breaches of its systems,” the suit contends.

Moreover, the case relays that Camping World kept affected individuals in the dark until it began notifying them of the incident in November, 297 days after the start of the breach. However, Camping World’s data breach notice failed to mention precisely what information was stolen and when, the complaint says.

Per the suit, Camping World has offered victims a one-year credit watch membership, a “wholly insufficient” remedy given that affected individuals now face a substantially increased risk of identity theft, fraud and other fraudulent misuses of their sensitive data, the filing states.

Although Camping World was aware, or should have been aware, of the significant increase in data breaches in recent years, the company chose to overlook industry-wide minimum standards for cybersecurity, the lawsuit argues. Additionally, the case asserts that the company’s failure to employ “reasonable and appropriate” security measures are out of line with the Federal Trade Commission Act and the agency’s cybersecurity guidelines for businesses. 

As the lawsuit tells it, Camping World has violated its obligations under the Health Insurance Portability and Accountability Act (HIPAA) by failing to comply with specific privacy rules designed to ensure that consumers’ protected health information remains confidential.

The lawsuit looks to represent anyone in the United States whose personal and/or health information was compromised in the data breach discovered by Camping World in February 2022.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.