Lawsuit Investigation into PurFoods Data Breach
Last Updated on September 21, 2023
Investigation Complete
Attorneys working with ClassAction.org have finished their investigation into this matter.
Check back for any potential updates and take a look at our open investigations here. The information on this page is for reference only.
Case Update
- September 21, 2023 – Investigation Closed, Lawsuit Filed
- Thank you to everyone who reached out about the PurFoods data breach. The investigation is now over and at least one proposed class action has been filed. You can read up on the initial filing here.
At this stage of the litigation, there isn't anything you need to do to be included, and you can read up on why that is here. Any updates relevant to the case will be added to this page should they become available.
In the meantime, you can find a list of ongoing investigations on this page and you can sign up for our free weekly newsletter here.
At A Glance
- This Alert Affects:
- Anyone who received a letter from PurFoods (doing business as Mom’s Meals) stating that their information was exposed during a data breach.
- What’s Going On?
- PurFoods recently announced that over 1.2 million individuals’ personal and medical information may have been accessed in a cyberattack between January 16 and February 22, 2023. Attorneys working with ClassAction.org are now investigating whether a class action lawsuit can be filed on behalf of victims.
- How Could a Lawsuit Help?
- A class action lawsuit could help compensate data breach victims for any harm they've experienced as a result of the incident, including lost time and fraudulent charges.
Attorneys working with ClassAction.org are looking into whether a lawsuit can be filed against PurFoods, LLC (doing business as Mom’s Meals) in light of a data breach that reportedly affected more than 1.2 million people.
The health-conscious meal delivery company recently announced that certain files in its network had been accessed and encrypted during a cyberattack between January 16 and February 22, 2023.
The files reportedly contained personal and medical information belonging to Mom’s Meals customers and current and former employees and contractors.
The attorneys believe PurFoods may have failed to take the proper steps to protect consumers’ sensitive information – and they’re now looking into whether a class action lawsuit could be filed to help compensate data breach victims.
PurFoods Data Breach: Why Did I Get a Letter?
On August 25, 2023, PurFoods began mailing data breach notices to people whose information may have been compromised in a cybersecurity attack between January 16 and February 22, 2023.
According to a notice on PurFoods’ website, the company identified “suspicious account behavior” on February 22 and later determined that certain files on its network had been encrypted. PurFoods stated that it “can’t rule out the possibility that data was taken” from one of its file servers since certain tools were detected that could be used to transfer data without authorization.
The data breach reportedly affected 1,237,681 individuals, including clients of PurFoods who received one or more meal deliveries and current and former employees and independent contractors.
Those who may have been affected by the incident should receive a data breach letter from PurFoods by mail, according to the company’s online data breach notice. PurFoods stated that anyone who believes they were affected and does not receive a letter within the few weeks following August 25 can contact a dedicated call center at (866) 676-4045.
What Information Was Exposed?
According to PurFoods’ data breach notice, the following information may have been exposed during the incident:
- Names
- Dates of birth
- Driver’s license/state identification numbers
- Financial account information
- Payment card information
- Medical record numbers
- Medicare and Medicaid identification
- Health and treatment information
- Diagnosis codes
- Meal categories and costs
- Health insurance information
- Patient ID numbers
The company stated that some Social Security numbers were also compromised “for less than 1% of the total population.”
How Could a Lawsuit Help?
If successful, a class action lawsuit could provide compensation for the following:
- Loss of privacy
- Lost time spent responding to the breach
- Fraudulent charges
- Out-of-pocket losses (e.g., the cost of obtaining medical records, credit reports and additional credit monitoring and identity theft protection services)
- Damage to credit
A lawsuit could also force PurFoods to implement better cybersecurity policies and practices.
Before commenting, please review our comment policy.