United of Omaha Life Insurance Company Hit with Data Breach Lawsuit Over April 2024 Phishing Attack
Dobson v. United of Omaha Life Insurance Company
Filed: August 5, 2024 ◆§ 8:24-cv-00306
A class action claims United of Omaha failed to protect the personal data of approximately 538,000 people during an April 2024 cyberattack.
A proposed class action lawsuit claims United of Omaha Life Insurance Company failed to protect the personal data of approximately 538,000 people during an April 2024 cyberattack.
Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.
The 58-page United of Omaha data breach lawsuit relays that on April 23, 2024, the company discovered that an unauthorized actor had accessed an employee's email account. Per the case, a subsequent investigation of the unauthorized access, which was reportedly linked to a phishing campaign targeting United of Omaha employees, determined that the email account was compromised between April 21 and April 23.
The data breach suit says the incident exposed the private information of current and former employees of the company’s clients, potentially including individuals’ full names, Social Security numbers, driver’s license numbers, employment data, health insurance policy numbers, limited medical information, and certain demographic details such as addresses or dates of birth.
The complaint contends that despite United of Omaha’s legal obligation to protect the sensitive information in its care, the company failed to implement proper cybersecurity protocols to safeguard the data, which it allegedly stored unencrypted and in a “reckless manner” in its computer systems.
In addition, the filing claims the defendant’s data breach notice letter was untimely and lacks crucial details about the cyberattack. The notice letter, which the company began to issue victims in late July 2024, fails to explain the nature of the breach, the identity of the perpetrators and what steps are being taken to secure stored information in the future, the suit charges.
What’s more, the case argues that United of Omaha’s offer of complimentary identity monitoring services for 12 months is “wholly inadequate” given the lifelong harm victims now face following the unauthorized exposure of their personal data.
The United of Omaha lawsuit looks to represent anyone in the United States whose private information was accessed and/or acquired by an unauthorized party as a result of the data breach reported by the company in July 2024.
Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.
Hair Relaxer Lawsuits
Women who developed ovarian or uterine cancer after using hair relaxers such as Dark & Lovely and Motions may now have an opportunity to take legal action.
Read more here: Hair Relaxer Cancer Lawsuits
How Do I Join a Class Action Lawsuit?
Did you know there's usually nothing you need to do to join, sign up for, or add your name to new class action lawsuits when they're initially filed?
Read more here: How Do I Join a Class Action Lawsuit?
Stay Current
Sign Up For
Our Newsletter
New cases and investigations, settlement deadlines, and news straight to your inbox.
Before commenting, please review our comment policy.