Employee Benefits Enrollment Platform Enroll Confidently Facing Class Action Over February 2024 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action lawsuit alleges Enroll Confidently, Inc. “lost control” of consumers’ personal data during a February 2024 cyberattack.

Get the latest open class action lawsuits sent to your inbox. Sign up for ClassAction.org’s free weekly newsletter.

The 42-page Enroll Confidently data breach lawsuit claims the company, which provides a platform to support employers and benefits providers throughout the employee benefits enrollment process, failed to maintain proper data security protocols and inadequately trained its workers in cybersecurity. The case contends that the defendant’s alleged negligence resulted in a network breach on February 13, 2024, during which an unauthorized third party copied certain files containing private data.

According to the data breach suit, the incident exposed at least individuals’ names, dates of birth, Social Security numbers, driver’s license numbers, state ID numbers, financial account information, health insurance details and medical data.

The complaint charges that the company’s lax cybersecurity made the private information in its care an “easy target[] for cybercriminals.” As the filing tells it, Enroll Confidently had “no effective means to prevent, detect, stop, or mitigate breaches of its systems—thereby allowing cybercriminals unrestricted access to its current and former consumers’ [personally identifiable information/protected health information].”

The defendant also waited to begin notifying data breach victims until mid-August of this year, six months after it purportedly discovered the incident, the lawsuit points out. The delay left impacted individuals “in the dark” and deprived them of the chance to take early steps to mitigate the consequences of the theft of their sensitive information, the class action suit argues.

According to the case, Enroll Confidently has “done little” to amend for its alleged misconduct. While the company has reportedly offered credit and identity monitoring services, these measures are “wholly insufficient” to compensate victims for the lifelong harm the defendant has caused them, the complaint claims.

The Enroll Confidently lawsuit looks to represent anyone in the United States whose personal information was compromised in the data breach discovered by the defendant in February 2024, including those who received notice of the incident.

Check out ClassAction.org’s lawsuit list for the latest open class action lawsuits.