United of Omaha Life Insurance Company Hit with Data Breach Lawsuit Over April 2024 Phishing Attack

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action lawsuit claims United of Omaha Life Insurance Company failed to protect the personal data of approximately 538,000 people during an April 2024 cyberattack.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 58-page United of Omaha data breach lawsuit relays that on April 23, 2024, the company discovered that an unauthorized actor had accessed an employee's email account. Per the case, a subsequent investigation of the unauthorized access, which was reportedly linked to a phishing campaign targeting United of Omaha employees, determined that the email account was compromised between April 21 and April 23.

The data breach suit says the incident exposed the private information of current and former employees of the company’s clients, potentially including individuals’ full names, Social Security numbers, driver’s license numbers, employment data, health insurance policy numbers, limited medical information, and certain demographic details such as addresses or dates of birth.

The complaint contends that despite United of Omaha’s legal obligation to protect the sensitive information in its care, the company failed to implement proper cybersecurity protocols to safeguard the data, which it allegedly stored unencrypted and in a “reckless manner” in its computer systems.

In addition, the filing claims the defendant’s data breach notice letter was untimely and lacks crucial details about the cyberattack. The notice letter, which the company began to issue victims in late July 2024, fails to explain the nature of the breach, the identity of the perpetrators and what steps are being taken to secure stored information in the future, the suit charges.

What’s more, the case argues that United of Omaha’s offer of complimentary identity monitoring services for 12 months is “wholly inadequate” given the lifelong harm victims now face following the unauthorized exposure of their personal data.

The United of Omaha lawsuit looks to represent anyone in the United States whose private information was accessed and/or acquired by an unauthorized party as a result of the data breach reported by the company in July 2024.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.