Zeroed-In Technologies Facing Class Action Over August 2023 Data Breach Impacting 1.9M People

New to ClassAction.org? Read our Newswire Disclaimer

Zeroed-In Technologies faces a proposed class action over an August 2023 data breach that reportedly exposed the personal information of more than 1.9 million individuals.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

According to the 44-page case, Zeroed-In, a human resources data analytics company, recently reported that an unauthorized party gained access to certain files containing sensitive information about its clients’ employees. The lawsuit claims that the hacking incident, which Zeroed-In says occurred between August 7 and August 8, 2023, compromised names, dates of birth and Social Security numbers.

Related Reading: Cyberscout Dearborn, MI Letter - Zeroed-In Technologies 2023 Data Breach

Despite discovering the cyberattack on August 8, Zeroed-In did not begin notifying affected individuals—who include Dollar Tree and Family Dollar employees—until around November 27, 2023, the complaint says.

“As a result of this delayed response, Plaintiffs and Class Members had no idea for approximately four months that their Private Information had been compromised, and that they were, and continue to be, at significant risk of identity theft and various other forms of personal, social, and financial harm,” the case says. “The risk will remain for their respective lifetimes.”

Per the filing, the data breach stemmed from the company’s failure to employ reasonable cybersecurity measures to adequately secure the sensitive information stored in its network.

The suit contends that Zeroed-In should have known, based on the substantial increase in data breaches in recent years, that its electronic records would be targeted by cybercriminals. Nevertheless, the defendant neglected to comply with industry standards for data security and instead chose to leave consumers’ highly sensitive information vulnerable to an attack, the complaint alleges.

To make matters worse, Zeroed-In has yet to offer data breach victims any assurance that their compromised data (or copies of such data) has been recovered or destroyed, or that the company has since enhanced its cybersecurity practices to prevent future attacks, the case says.

The lawsuit looks to represent anyone in the United States who had private information accessed and/or acquired as a result of the data breach experienced by Zeroed-In Technologies, including all who were sent a notice of the incident.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.