Green Diamond Resource Company Hit with Class Action Over June 2023 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action claims lax cybersecurity on the part of Green Diamond Resource Company resulted in a June 2023 data breach that compromised customers’ private information.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

According to the 47-page Green Diamond data breach lawsuit, an unauthorized third party gained access to certain files within the forest management company’s computer systems between June 26 and June 27, 2023.

Per the suit, the incident potentially exposed customers’ names, dates of birth, Social Security numbers, medical data, health insurance and financial account information, driver’s license or government-issued ID numbers, passport numbers and full access credentials.

Although Green Diamond had a duty to safeguard the personal information in its care, the Seattle-based company “negligently” failed to implement proper data security protocols to protect its computer network from unauthorized intrusion, the case claims. The complaint notes that customer data was allegedly stored “unsecured and unencrypted” in the defendant’s servers.

What’s more, Green Diamond did not begin to notify victims until April 2024, nearly 10 months after the incident was purportedly discovered, the data breach lawsuit relays.

“As a result of this delayed response, [the plaintiff] and ‘class members’ … had no idea for almost a year that their private information had been compromised, and that they were, and continue to be, at significant risk of identity theft and various other forms of personal, social, and financial harm,” the filing shares. “The risk will remain for their respective lifetimes.”

The case contends that Green Diamond has offered “no assurance” that the potentially compromised data has been recovered or deleted, or that the company has sufficiently improved its cybersecurity practices to avoid future incidents.

The lawsuit looks to represent anyone in the United States whose private information was accessed as a result of the Green Diamond data breach, including those who were sent notice of the incident.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.