Toshiba Facing Data Breach Lawsuit Over Months-Long Cyberattack Announced in 2024

New to ClassAction.org? Read our Newswire Disclaimer

Toshiba America Business Solutions, Inc. faces a proposed class action lawsuit over a months-long cyberattack that reportedly began in December 2023.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 43-page Toshiba data breach lawsuit alleges that deficient cybersecurity on the part of the California-based company, which manages the marketing, sales, service support and distribution of various office equipment, allowed cybercriminals to “easily infiltrate[]” its computer systems and access individuals’ names and Social Security numbers.

The data breach suit shares that after Toshiba detected unusual activity in its email environment, a subsequent investigation revealed that an unauthorized third party had access to the network for more than three months, from December 4, 2023 to March 18, 2024.

Toshiba has yet to explain why the data breach was allowed to continue for so long or why the company failed to detect the intrusion until months afterwards, the case contends.

The complaint claims the “massive and preventable” cyberattack stemmed directly from the defendant’s lax data security protocols, which, according to the filing, have exposed individuals’ highly sensitive information to an “undoubtedly nefarious third party.”

As a result of Toshiba’s negligent conduct, cybercriminals now have “everything they need to commit identity theft and wreak havoc on the financial and personal lives” of data breach victims, the lawsuit alleges.

What’s more, although the incident purportedly began in December 2023, the company did not begin notifying impacted individuals until May 2024, with some victims receiving notice letters as late as July, the suit relays.

The plaintiff, a former Toshiba employee residing in Tennessee, says he received notice from the company in late July of this year informing him that his private data had been compromised in the breach. The man claims he has already experienced fraudulent activity in his bank account as a result of the incident and is now “desperately trying to mitigate the damage that Toshiba has caused.”

The Toshiba lawsuit looks to represent anyone who was sent a data breach notice letter from the company after the incident.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.