Data Breach Lawsuit Alleges Fireworks Software Failed to Prevent June 2024 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action lawsuit claims deficient cybersecurity on the part of Fireworks Software, Inc. reportedly resulted in a June 2024 data breach.

Get the latest open class action lawsuits sent to your inbox. Sign up for ClassAction.org’s free weekly newsletter.

Fireworks Software’s data breach notice letter shares that after the company detected unauthorized activity in its computer network, an investigation revealed that an unknown third party had gained access to the system and a “limited amount of personal information” stored therein between June 23 and June 26, 2024.

Per the 42-page lawsuit, the incident compromised individuals’ full names, dates of birth, Social Security numbers and alien registration numbers.

The data breach suit alleges that Fireworks Software, which provides customer relationship management and record-keeping services to colleges nationwide, could have prevented the cyberattack had it properly protected its network from unauthorized intrusion. According to the case, the company failed to implement adequate data security practices and instead maintained the private information unencrypted and unredacted in its computer systems.

The complaint contends that Fireworks Software’s alleged negligence is “especially egregious” since the defendant knew cybercriminals frequently target entities in the educational sector to access the highly sensitive data of students, applicants and employees.

In addition, the filing charges that the company’s notice letter was unreasonably delayed and “woefully deficient.” As the class action lawsuit tells it, the notice letter—which was only issued to victims last month—failed to mention how cybercriminals infiltrated the network, whether the breach was system-wide, how many people were affected by the incident and other “basic details.”

The suit asserts that impacted individuals now face a heightened risk of being targeted for cybercrimes as a result of the incident.

“In the months and years following the data breach, [the plaintiff] and class members will experience a slew of harms as a result of [Fireworks Software’s] ineffective data security measures,” the case says. “Some of these harms may include fraudulent charges, fraudulent accounts opened in their names, and targeted advertising without consent.”

The Fireworks Software lawsuit looks to represent anyone in the United States whose private information was compromised as a result of the data breach discovered around June 2024 and was sent notice of the incident.

Check out ClassAction.org’s lawsuit list for the latest open class action lawsuits and investigations.