SAN FRANCISCO — Vacation rental company HomeAway Inc. and its online payment partner YapStone Inc. didn’t do enough to prevent a yearlong security breach that exposed user information including bank account and Social Security numbers, plaintiffs lawyers allege in suit filed Monday. HomeAway, which operates HomeAway.com, VRBO.com and VacationRentals.com, alerted users in September that its security had been compromised, leaving data accessible to outsiders from July 2014 to August 2015, according to the suit. Plaintiffs claim the breach compromised the names, email addresses, physical addresses, dates of birth, bank account information and Social Security numbers of property owners and managers.

Though HomeAway and YapStone learned of the breach in August, the companies took six weeks to notify customers, the suit alleges.

This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.

To view this content, please continue to their sites.

Not a Lexis Subscriber?
Subscribe Now

Not a Bloomberg Law Subscriber?
Subscribe Now

Why am I seeing this?

LexisNexis® and Bloomberg Law are third party online distributors of the broad collection of current and archived versions of ALM's legal news publications. LexisNexis® and Bloomberg Law customers are able to access and use ALM's content, including content from the National Law Journal, The American Lawyer, Legaltech News, The New York Law Journal, and Corporate Counsel, as well as other sources of legal information.

For questions call 1-877-256-2472 or contact us at [email protected]