IT Software Company Fortra to Blame for ‘Foreseeable’ Data Breach, Class Action Says

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action lawsuit claims negligence on the part of IT management software company Fortra resulted in a “foreseeable” data breach that compromised the personal information of nearly 140,000 individuals.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 32-page lawsuit says the Minnesota-based company, which provides data storage and cybersecurity services to Hatch Bank, failed to protect the digital bank’s consumer data from hackers who reportedly gained access to Fortra’s systems on January 29, 2023. A subsequent investigation showed that the personal information of around 139,493 people was compromised in the incident, and included customers’ and current and former employees’ names and Social Security numbers, the suit relays.

As the case tells it, the ransomware attack was a direct result of Fortra’s failure to implement adequate cybersecurity measures to protect the private data stored in its network. The defendant, who refers to itself as “[y]our cybersecurity ally,” purportedly maintained the data in a “dangerous” manner “vulnerable to cyberattacks,” the complaint says.

By accepting and storing consumers’ highly sensitive information, Fortra had a legal obligation to safeguard it against unauthorized disclosure, the filing charges.

What’s more, in light of the growing frequency of data breaches, and as an IT software company specializing in cybersecurity services, Fortra should have understood the importance of maintaining robust online security practices, the lawsuit argues.

The plaintiff, an Illinois resident, received notice of the data breach on February 28 of this year and learned that her name and Social Security number had been compromised, the suit states.

Though Fortra has offered the plaintiff and other victims one year of fraud and identity monitoring services, this gesture “does nothing to compensate” for the lifetime risk they now face as a result of the company’s negligence, the case contends.

The lawsuit looks to represent anyone identified by Fortra as among those impacted by the data breach, including those who received notice in February 2023.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.