Class Action Filed Over Prudential Data Breach Affecting Over 300K Consumers

New to ClassAction.org? Read our Newswire Disclaimer

The Prudential Insurance Company of America faces a proposed class action over a data breach that reportedly affected 320,840 current and former customers.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 41-page case alleges the insurance company’s failure to properly secure consumers’ information and implement “basic” cybersecurity practices allowed an unauthorized actor to access one of its servers between May 29 and 30 of this year. The incident exposed customers’ Social Security numbers, full names, dates of birth, zip codes, states of residence and phone numbers, the lawsuit claims.

According to the complaint, the data stolen by cybercriminals was stored unencrypted on Prudential’s computer systems and has likely been sold on the dark web. Affected individuals now face a “lifetime risk” of identity theft and fraud and must now take steps to protect themselves from the misuse of their information, the suit says.

The filing specifies that the May 2023 cyberattack targeted MOVEit, a popular file transfer service used by Pension Benefit Information (PBI), a third-party vendor that provides “regulatory compliance and operational support services” for Prudential.

Prudential was obligated under federal guidelines regarding data security to verify that its third-party service providers implement reasonable security measures, encrypt information stored on computer networks and monitor for suspicious activity on their computer systems, the case says.

Moreover, the insurance company had a duty to keep its contractual promises to consumers that it would “maintain physical, electronic, and procedural safeguards to protect your personal information,” the lawsuit contends.

The case alleges that although the company behind MOVEit revealed on May 31 that its software had been hacked, Prudential waited until July 31 to inform those whose personal information was compromised.

“[The defendant] owed a duty to Plaintiff and Class members to disclose in a timely and accurate manner when and how the Data Breach occurred,” the suit contends.

The lawsuit looks to represent anyone in the United States whose private information was accessed and/or acquired by an unauthorized party as a result of the data breach announced by Prudential.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.