Capital One Hit With Civil Suits Over Alleged Data Breach
Capital One is facing class action lawsuits over a major data breach said to have exposed sensitive information of more than 100 million customers and card applicants.
July 30, 2019 at 01:47 PM
4 minute read
The original version of this story was published on National Law Journal
Capital One is facing class action lawsuits over a major data breach said to have exposed sensitive information of more than 100 million customers and card applicants.
By Tuesday afternoon at least two lawsuits had been filed against the company in federal courts along the East Coast. The suits both contend that the bank failed to properly secure and monitor the data of its customers, and seek to bring claims on behalf of the estimated 106 million people affected.
Kevin Zosiak, a Connecticut resident, filed a lawsuit against the banking company Tuesday morning in the U.S. District Court for the District of Columbia. Manhattan attorney Linda Nussbaum of the Nussbaum Law Group filed the lawsuit, along with Greenwich, Connecticut, attorney Adam Frankel of Greenwich Legal Associates.
READ ZOSIAK'S COMPLAINT:
|The 15-page complaint contends that Capital One, which is estimated to have more than $373 billion in assets, should have been aware of data vulnerabilities, since it has, allegedly, been the subject of security breaches previously. Capital One is headquartered in McLean, Virginia, and incorporated in Delaware.
“Defendants' data security obligations and promises were particularly important given the substantial increase in data breaches, which were widely known to the public and to anyone in defendants' industries,” Zosiak said in the complaint.
DuWayne Baird, an Ohio resident, filed his class action over the breach in the U.S. District Court for the Eastern District of Virginia. Attorneys from Tampa, Florida's Morgan & Morgan and Baltimore's Murphy, Falcon & Murphy filed the suit on behalf of Baird.
Baird's 49-page complaint alleges that not only was the company negligent in protecting the data, it also failed to comply with federal requirements about maintaining and disposing of data. Along with alleging negligence and breach of implied contract, Baird raises claims of unjust enrichment, invasion of privacy and several claims under Ohio's consumer protection statutes.
In an emailed statement, John Yanchunis of Morgan & Morgan said, “Like so many others, Capital One knew the risks of a security breach and, we allege, did not take the proper steps to protect the personal information applicants and customers trusted the company to safeguard. You'd think with one data breach after another, companies would wise up and take responsibility for the data it collects from consumers, but unfortunately, they continue to shirk that responsibility.”
READ BAIRD'S COMPLAINT:
|New York Attorney General Letitia James also announced Tuesday morning her office was launching an investigation into the possible data breach.
The press office of Capital One did not immediately return a message seeking comment.
The proposed class action comes a day after the company announced the breach and the feds charged a Seattle woman for allegedly perpetrating the breach.
The bank announced the breach Monday, saying it likely affected an estimated 100 million American customers and 6 million Canadian customers, and that the largest cache of data came from consumers and small businesses that applied for card products from 2005 through early 2019. The information that was exposed included names, address, phone numbers, emails, dates of birth, as well as fragments of transaction data and Social Security and bank account numbers for some customers.
According to the company, no credit card account numbers or log-in credentials were compromised.
Both complaints said the breach occurred in late March and continued through late April, but the company only learned about the breach July 19. The complaints further contended that the financial services company only learned about the breach after an unnamed person sent the company a link to a file containing the leaked information.
Also on Monday, the U.S. Attorney's Office for the Western District of Washington announced it had arrested a 33-year-old software engineer named Paige Thompson in connection with the breach. According to the feds, Thompson breached the bank's security through a reconfigured firewall on an app, and later posted the information on the software development site GitHub. The feds said a GitHub user later saw Thompson's post, and then alerted Capital One about the breach.
The company's statement announcing the breach said that, based on the company's analysis, it was unlikely the information had been disseminated, or used for fraud, but that it would continue to investigate.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllLitigators of the Week: The Eighth Circuit Knocks Out a $564M Verdict Against BMO in Ponzi Case
Litigators of the Week: Second Circuit Tells Argentina to Turn Over More Than $300M to Bondholders
How One of the World's Largest Institutional Investors Approaches Litigation
Big Law and Litigation Finance Seem to Be Having a Moment
Trending Stories
Who Got The Work
Dechert partners Andrew J. Levander, Angela M. Liu and Neil A. Steiner have stepped in to defend Arbor Realty Trust and certain executives in a pending securities class action. The complaint, filed July 31 in New York Eastern District Court by Levi & Korsinsky, contends that the defendants concealed a 'toxic' mobile home portfolio, vastly overstated collateral in regards to the company's loans and failed to disclose an investigation of the company by the FBI. The case, assigned to U.S. District Judge Pamela K. Chen, is 1:24-cv-05347, Martin v. Arbor Realty Trust, Inc. et al.
Who Got The Work
Arthur G. Jakoby, Ryan Feeney and Maxim M.L. Nowak from Herrick Feinstein have stepped in to defend Charles Dilluvio and Seacor Capital in a pending securities lawsuit. The complaint, filed Sept. 30 in New York Southern District Court by the Securities and Exchange Commission, accuses the defendants of using consulting agreements, attorney opinion letters and other mechanisms to skirt regulations limiting stock sales by affiliate companies and allowing the defendants to unlawfully profit from sales of Enzolytics stock. The case, assigned to U.S. District Judge Andrew L. Carter Jr., is 1:24-cv-07362, Securities and Exchange Commission v. Zhabilov et al.
Who Got The Work
Clark Hill members Vincent Roskovensky and Kevin B. Watson have entered appearances for Architectural Steel and Associated Products in a pending environmental lawsuit. The complaint, filed Aug. 27 in Pennsylvania Eastern District Court by Brodsky & Smith on behalf of Hung Trinh, accuses the defendant of discharging polluted stormwater from its steel facility without a permit in violation of the Clean Water Act. The case, assigned to U.S. District Judge Gerald J. Pappert, is 2:24-cv-04490, Trinh v. Architectural Steel And Associated Products, Inc.
Who Got The Work
Michael R. Yellin of Cole Schotz has entered an appearance for S2 d/b/a the Shoe Surgeon, Dominic Chambrone a/k/a Dominic Ciambrone and other defendants in a pending trademark infringement lawsuit. The case, filed July 15 in New York Southern District Court by DLA Piper on behalf of Nike, seeks to enjoin Ciambrone and the other defendants in their attempts to build an 'entire multifaceted' retail empire through their unauthorized use of Nike’s trademark rights. The case, assigned to U.S. District Judge Naomi Reice Buchwald, is 1:24-cv-05307, Nike Inc. v. S2, Inc. et al.
Who Got The Work
Sullivan & Cromwell partner Adam S. Paris has entered an appearance for Orthofix Medical in a pending securities class action arising from a proposed acquisition of SeaSpine by Orthofix. The suit, filed Sept. 6 in California Southern District Court, by Girard Sharp and the Hall Firm, contends that the offering materials and related oral communications contained untrue statements of material fact. According to the complaint, the defendants made a series of misrepresentations about Orthofix’s disclosure controls and internal controls over financial reporting and ethical compliance. The case, assigned to U.S. District Judge Linda Lopez, is 3:24-cv-01593, O'Hara v. Orthofix Medical Inc. et al.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250