CSC ServiceWorks Hit with Data Breach Lawsuit Over Cyberattack Affecting 35K People

New to ClassAction.org? Read our Newswire Disclaimer

CSC ServiceWorks, Inc. faces a proposed class action lawsuit over a cyberattack announced this month that reportedly compromised the personal and medical data of approximately 35,340 people.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 32-page CSC ServiceWorks data breach lawsuit says the New York-based commercial laundry service provider detected unusual activity on its computer network on February 4, 2024. According to the data breach suit, a subsequent investigation determined that an unauthorized third party had gained access to a portion of the company’s computer systems between September 23, 2023 and February 4, 2024, and potentially exfiltrated certain files stored therein.

The CSC ServiceWorks data breach notice letter shares that the incident may have exposed consumers’ full names, dates of birth, contact details, Social Security numbers, driver’s license numbers, financial account and health insurance information and certain medical data.

The case alleges the cyberattack was a direct result of the company’s “grossly negligent—indeed, reckless—failure” to implement adequate data security measures to protect the sensitive information in its care.

“None of this should have happened,” the complaint charges, arguing that the data breach was entirely preventable had the defendant followed reasonable cybersecurity protocols such as properly encrypting the stored information.

“Due to [CSC ServiceWorks’] negligence and failures, cyber criminals obtained and now possess everything they need to commit personal identity theft and wreak havoc on the financial and personal lives of thousands of individuals, for decades to come,” the filing asserts.

To make matters worse, although the company purports to have discovered the incident in February, it waited until this month to begin notifying victims, the privacy suit contends.

Per the case, the “inexplicable delay” has only compounded the harms suffered by data breach victims, who now face risks of “crippling” identity theft and fraud at the hands of cybercriminals.

The CSC ServiceWorks lawsuit looks to represent anyone in the United States whose personal information was compromised as a result of the data breach.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.