February 2024 Data Breach Triggers Class Action Lawsuit Against Kohl’s

New to ClassAction.org? Read our Newswire Disclaimer

Kohl’s has been hit with a proposed class action lawsuit over the February 2024 Financial Business and Consumer Solutions (FBCS) data breach that reportedly impacted the personal information of more than 4.2 million people.

Get the latest open class action lawsuits sent to your inbox. Sign up for ClassAction.org’s free weekly newsletter.

According to the 42-page data breach lawsuit, debt collector FBCS, which Kohl’s uses in connection with its credit card services, was targeted in a cyberattack during which certain systems in its network were accessed by an unauthorized third party between February 14 and February 26, 2024. Though the data breach did not impact Kohl’s computer systems, customers whose private information Kohl’s provided to FBCS were among the 4,253,394 individuals impacted by the incident, the complaint says.

The class action suit relays that the cyberattack may have exposed individuals’ names, Social Security numbers and dates of birth. Account information such as mailing addresses, email addresses and partial account numbers may have also been compromised, the case adds.

Despite the company’s legal obligation to safeguard consumer data, Kohl’s failed to protect the sensitive information in its care and neglected to ensure its vendor implemented adequate cybersecurity protocols, the filing claims. As the data breach lawsuit tells it, Kohl’s could have prevented the incident by properly securing customer data and making sure that FBCS did the same.

What’s more, although FBCS purportedly discovered the data breach in late February 2024, several months passed before the company or Kohl’s began to notify victims, the suit shares. Per the case, FBCS issued notice letters on April 26 of this year, and the retailer sent them out around August 15.

The plaintiff, an Arizona resident, says he received notice from Kohl’s in mid-August informing him of the unauthorized exposure of his personal data, which had apparently been shared with FBCS in connection with his Kohl’s credit card. Like other victims, the man now faces a heightened risk of being targeted for cybercrimes as a result of the incident and “fears for his personal financial security,” the complaint claims.

The Kohl’s data breach lawsuit looks to represent anyone in the United States whose personally identifiable information was compromised in the data breach, including those who received notice of the incident.

Check out ClassAction.org's lawsuit list for current class action lawsuits and investigations.