Gas South Facing Class Action Over February 2022 Data Breach Impacting Thousands of Customers

New to ClassAction.org? Read our Newswire Disclaimer

Gas South, LLC faces a proposed class action over a February 2022 data breach that reportedly exposed the personal information of more than 38,000 customers to unauthorized access.

The 48-page lawsuit claims Gas South, who provides natural gas services to customers in Georgia and several other states, maintained sensitive data “in a reckless manner.” Per the suit, the information compromised in the breach was unencrypted and left “in a condition vulnerable to cyberattacks.”

The case says the exposed data may have included customers’ full names; addresses and other contact information; Social Security and driver’s license numbers; and dates of birth.

According to the suit, the roughly 38,670 customers whose information was exposed in the breach, which occurred between February 13 and 23, 2022, now face a heightened risk of identity theft and fraud as a result of Gas South’s failure to safeguard their data.

The case relays that Gas South discovered around February 21 of this year that it had been the victim of a “data incident,” during which an unauthorized person or people accessed sensitive information stored on its computer systems.

Although the defendant discovered the breach in February, Gas South waited another five months, until July 15, to begin notifying customers whose data was compromised, the suit says. Per the case, the company’s data breach notice does not specify exactly what personal information was accessed, and states that Gas South’s investigation is still incomplete.

The lawsuit argues that although Gas South informed customers it had begun “reviewing and enhancing” its existing data security policies and procedures to prevent future data breaches, these measures “could have—and should have—been in place prior to the Data Breach,” and likely would have prevented it from happening.

Further, the case goes on to claim that Gas South’s “paltry” offer of 12 months of identity theft monitoring and protection services is “inadequate” given data breach victims will likely face the threat of identity theft for many years.

The suit looks to represent anyone who receives services from Gas South and whose personal information was compromised as a result of the data breach that occurred in February 2022.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s newsletter here.