Data Breach Lawsuit Claims EdisonLearning Failed to Protect Employee Info During Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

EdisonLearning faces a proposed class action over a March 2023 cyberattack that compromised the personal data of approximately 23,000 current and former employees.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 54-page EdisonLearning data breach lawsuit says the company, which provides digital learning solutions for middle and high school students, detected unusual activity in its network on March 17, 2023. Following an investigation, the company determined that between March 7 and March 17 of that year, an unauthorized third party accessed and downloaded certain files stored in its computer systems that contained employees’ names and Social Security numbers, the suit relays.

The data breach case alleges that despite EdisonLearning’s legal duty to safeguard the sensitive data in its care, the company stored the information unencrypted and in a condition that was particularly “vulnerable to cyberattacks.”

Victims are now at a greater risk of identity theft, fraud and other illegal schemes thanks to EdisonLearning’s alleged negligence, the case stresses.

In addition, EdisonLearning’s notice letter omitted essential details about the incident, without which victims’ ability to mitigate the consequences of the breach is substantially reduced, the complaint contends. For example, the notice letter failed to explain how cybercriminals gained access to the network and what steps are being taken to secure employee data in the future, the case shares.

The plaintiff, a former EdisonLearning employee residing in Pennsylvania, says she received notice from the company in late February 2024 informing her that her private data had been compromised in the breach. The woman claims that as a result of the incident, she has experienced fraudulent charges to her credit card totaling approximately $449. According to the filing, she was also notified by her financial service that her personal information has been disseminated on the dark web.

The lawsuit looks to represent anyone in the United States whose private information was impacted as a result of the EdisonLearning data breach announced in February 2024.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.