Cyberattack Announced in January 2024 Triggers Class Action Against Arrowhead Regional Computing Consortium
Horsch v. Arrowhead Regional Computing Consortium
Filed: January 18, 2024 ◆§ 0:24-cv-00143
A class action claims ARCC failed to protect the private data of more than 65,000 individuals during a cyberattack detected in February 2023.
A proposed class action claims Arrowhead Regional Computing Consortium (ARCC) failed to protect the private data of more than 65,000 individuals during a cyberattack reportedly detected in February 2023.
Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.
The 34-page lawsuit says the company, which provides payroll services and student data systems to more than 50 school districts in Minnesota, discovered unauthorized access to its network on February 6 of last year. Per the suit, an investigation determined that the data breach compromised certain personal information belonging to ARCC employees and the students, families and teachers affiliated with its school district clients.
According to the case, the cyberattack may have exposed individuals’ names, Social Security numbers, health insurance data and medical information.
The complaint contends that although ARCC fully understood its obligation to safeguard the data in its care and the substantial consequences that would result from its failure to do so, the company failed to implement “basic” cybersecurity protocols. The highly sensitive information was stored “unsecured and unencrypted” in ARCC’s network, “in a condition vulnerable to cyberattacks,” the filing alleges.
The plaintiff, a Minnesota resident, says he received notice of the data breach from ARCC in January 2024, almost a year after the company purports to have discovered the incident. The notice letter informed the man that his private information had been compromised in the breach, the lawsuit states.
Victims like the plaintiff now face a heightened risk of identity theft and fraud as a result of ARCC’s negligence, the suit claims, adding that impacted individuals will also likely incur significant out-of-pocket costs for protective measures and financial services.
The lawsuit looks to represent anyone ARCC identified as being among the individuals affected by the data breach, including those who received notice of the incident.
Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.
Hair Relaxer Lawsuits
Women who developed ovarian or uterine cancer after using hair relaxers such as Dark & Lovely and Motions may now have an opportunity to take legal action.
Read more here: Hair Relaxer Cancer Lawsuits
How Do I Join a Class Action Lawsuit?
Did you know there's usually nothing you need to do to join, sign up for, or add your name to new class action lawsuits when they're initially filed?
Read more here: How Do I Join a Class Action Lawsuit?
Stay Current
Sign Up For
Our Newsletter
New cases and investigations, settlement deadlines, and news straight to your inbox.
Before commenting, please review our comment policy.