Texarkana, TX 75° View Live Radar Mon H 77° L 51° Tue H 69° L 43° Wed H 72° L 51° Weather Sponsored By:

Equifax data breach leads to class action suit in federal court

Equifax data breach leads to class action suit in federal court

October 12th, 2017 by Lynn LaRowe in Texarkana News

A massive data breach by the credit reporting firm Equifax affecting more than 140 million Americans has led to the filing of class action lawsuits across the country and in a Texarkana federal court.

Related Article

Equifax breach exposes 143 million people to identity theft

Read more

The suit was filed Friday in the Texarkana Division of the Western District of Arkansas and seeks to represent anyone whose personal identifying information in Equifax's possession was hacked from May to July. The complaint, filed by the Little Rock firm Steel, Wright, Gray & Hutchinson and the Nashville, Tenn.-based Sanford Heisler Sharp firm, identifies both a national class of potential plaintiffs and an Arkansas class of potential plaintiffs and names Prescott, Ark., resident Roshunda Gulley as the class representative.

Equifax discovered that a flaw in its U.S. website allowed hackers to access extremely sensitive data beginning in May until the breach was discovered July 29, according to the complaint and Equifax's website. The company didn't announce the breach publicly and to potential identity theft and fraud victims until Sept. 7. According to the complaint and national news reports cited in it, high-ranking Equifax executives dumped millions of dollars worth of shares in the company before the September announcement in anticipation of falling stock prices.

Personal information stolen by hackers includes names, dates of birth, social security numbers, addresses and in some cases drivers license numbers and credit card numbers, according to the complaint.

"Armed with the stolen information, unauthorized third parties now possess keys that unlock consumers' medical histories, bank accounts, employee accounts, and more," the complaint states. "Criminals can take out loans, mortgage property, open financial accounts and credit cards in a victim's name, obtain government benefits, file fraudulent tax returns, obtain medical services, and provide false information to police during an arrest, all under the victim's name."

Instead of spending their hours working or enjoying time off, data breach victims must budget time and money to monitor their accounts, register for credit protection services and if necessary, file police reports.

"This time has been lost forever and cannot be recaptured," the complaint states. "In all manner of life in this country, time has constantly been recognized as compensable, and even if retired from the work force, consumers should be free from having to deal with the consequences of a credit reporting agency's wrongful conduct, as is the case herePlaintiffs and class members will likely spend considerable effort and money for the rest of their lives on monitoring and responding to the repercussions of this cyber attack."

Equifax should have known it was vulnerable to hacking as smaller breaches occurred in 2013, 2016 and in January 2017, according to the complaint. The complaint alleges that a company that markets itself as an expert in data security should have done more to protect consumers. The complaint accuses Equifax of violating the Federal Fair Credit Reporting Act, of negligent violations of the FFCRA, of negligence, of breach of implied contract, of unjust enrichment, invasion of privacy and more.

The complaint alleges that personal identifying information in Equifax's possession is presently in even greater danger as cyber thieves now know the company's databases are an easy target. The five week delay in notifying the public that the information had been stolen prevented data breach victims from taking proactive steps to protect themselves, according to the complaint.

The complaint seeks a declaratory judgment that Equifax has failed in its duty to protect the information with which it is entrusted and that it should be forced through an injunction to undergo regular third-party auditing to identify security problems. Also sought are damages for all those affected including the costs of identity protection and the cost of fighting identity theft and fraud.

A note on the case docket indicates a copy of the complaint has been forwarded to the federal panel on multi-district litigation. The case could be consolidated with a plethora of similar ones and handled in a single court to insure rulings are consistent and to promote economical use of the federal judicial system. For now the case is assigned to U.S. District Judge Susan Hickey. Equifax has not filed a response.

llarowe@texarkanagazette.com

Getting Started/Comments Policy

Getting started

  1. 1. If you frequently comment on news websites then you may already have a Disqus account. If so, click the "Login" button at the top right of the comment widget and choose whether you'd rather log in with Facebook, Twitter, Google, or a Disqus account.
  2. 2. If you've forgotten your password, Disqus will email you a link that will allow you to create a new one. Easy!
  3. 3. If you're not a member yet, Disqus will go ahead and register you. It's seamless and takes about 10 seconds.
  4. 4. To register, either go through the login process or just click in the box that says "join the discussion," type your comment, and either choose a social media platform to log you in or create a Disqus account with your email address.
  5. 5. If you use Twitter, Facebook or Google to log in, you will need to stay logged into that platform in order to comment. If you create a Disqus account instead, you'll need to remember your Disqus password. Either way, you can change your display name if you'd rather not show off your real name.
  6. 6. Don't be a huge jerk or do anything illegal, and you'll be fine.

Texarkana Gazette Comments Policy

The Texarkana Gazette web sites include interactive areas in which users can express opinions and share ideas and information. We cannot and do not monitor all of the material submitted to the website. Additionally, we do not control, and are not responsible for, content submitted by users. By using the web sites, you may be exposed to content that you may find offensive, indecent, inaccurate, misleading, or otherwise objectionable. You agree that you must evaluate, and bear all risks associated with, the use of the Gazette web sites and any content on the Gazette web sites, including, but not limited to, whether you should rely on such content. Notwithstanding the foregoing, you acknowledge that we shall have the right (but not the obligation) to review any content that you have submitted to the Gazette, and to reject, delete, disable, or remove any content that we determine, in our sole discretion, (a) does not comply with the terms and conditions of this agreement; (b) might violate any law, infringe upon the rights of third parties, or subject us to liability for any reason; or (c) might adversely affect our public image, reputation or goodwill. Moreover, we reserve the right to reject, delete, disable, or remove any content at any time, for the reasons set forth above, for any other reason, or for no reason. If you believe that any content on any of the Gazette web sites infringes upon any copyrights that you own, please contact us pursuant to the procedures outlined in the Digital Millennium Copyright Act (Title 17 U.S.C. § 512) at the following address:

Copyright Agent
The Texarkana Gazette
15 Pine Street
Texarkana, TX 75501
Phone: 903-794-3311
Email: webeditor@texarkanagazette.com