Tech Provider Bradford-Scott Data Facing Class Action Over Cyberattack Affecting 35K People

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action accuses Bradford-Scott Data of failing to protect the personal information of approximately 35,000 individuals during a May 2023 cyberattack.

Did you receive a data breach letter from Bradford-Scott Data? Let us know here.

The 54-page data breach lawsuit alleges that negligent cybersecurity on the part of the Indiana-based software provider is to blame for the incident, during which an unauthorized third party may have copied certain files from the company’s computer network.

Per the suit, the cyberattack—which reportedly occurred between May 19 and May 28, 2023—compromised the names, Social Security numbers and financial account numbers of current and former customers of the defendant’s business clients.

According to the case, the data breach stemmed directly from Bradford-Scott’s failure to implement adequate cybersecurity practices that would have otherwise secured stored information from unauthorized intrusion. The complaint contends that the company could have prevented the incident entirely had it complied with proper encryption protocols.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

As a result of the defendant’s negligence, the filing alleges that victims like the plaintiff—an Indiana resident—now face an ongoing threat of identity theft, fraud and other illegal schemes at the hands of data thieves.

In addition, the lawsuit takes issue with Bradford-Scott’s February 2024 notice letter, arguing that it was unreasonably delayed and lacked critical details about the data breach. For instance, the suit claims, the notice failed to explain how cybercriminals gained access to the network, who was behind the cyberattack and what steps are being taken to safeguard stored information in the future.

The case charges that without these crucial details, victims’ ability to mitigate the consequences of the incident is substantially reduced.

The lawsuit looks to represent anyone in the United States whose private information was accessed and/or acquired by an unauthorized third party as a result of the Bradford-Scott data breach reported in February 2024.

Did you receive a data breach letter from Bradford-Scott Data? Let us know here.