Data Breach Class Action Lawsuit Filed Against Asbury Automotive Over December 2023 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

Asbury Automotive Group has been hit with a class action lawsuit over a December 2023 data breach that compromised the private information of thousands of prospective, current and former employees.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here. 

The 48-page proposed class action lawsuit shares that an unauthorized third party, on or around December 25 of last year, gained access to parts of Asbury Automotive’s computer network and obtained certain files stored therein. Per the data breach suit, the cyberattack experienced by the company—which operates auto dealerships nationwide—compromised employees’ names, Social Security numbers, driver’s license numbers and state ID numbers. 

The case contends that the exposure of employees’ private data was entirely “preventable” and stemmed from lax cybersecurity on the part of Asbury Automotive. Despite the company’s legal obligation to protect the personal information in its care, the defendant failed to take reasonable measures to secure its network against unauthorized intrusion, the complaint claims. 

To make matters worse, the filing argues, Asbury Automotive did not begin to notify victims until late April 2024, nearly four months after the incident was reportedly discovered. 

The plaintiff, an employee residing in Arizona, says he received notice from Asbury Automotive early this month informing him that his personal data had been compromised in the breach. The case alleges that, as a result of the company’s negligence, the man and other victims now face a lifelong threat of being targeted for cybercrimes such as identity theft and fraud. 

According to the complaint, Asbury Automotive is a Fortune 500 company and one of the largest auto retailers and service providers in the United States, operating nearly 160 dealerships nationwide. 

The lawsuit looks to represent anyone whose personal information was compromised as a result of the Asbury Automotive data breach announced on or about April 24, 2024. 

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.