Ashley Furniture Hit with Class Action Lawsuit Over 2023 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

The Dufresne Spencer Group, which does business as Ashley Furniture HomeStore, faces a proposed class action lawsuit that alleges a 2023 data breach stemmed from the company’s cybersecurity failures.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 34-page data breach lawsuit says that an unauthorized third party gained access to the furniture store chain’s computer systems between May 15 and June 5, 2023. According to the case, customers’ names, dates of birth, driver’s license details, banking information, digital signatures and other sensitive data were stolen by cybercriminals during the incident.

Notably, it wasn’t until January 15, 2024 that the company detected the intrusion, the complaint points out.

The filing contends that the Ashley Furniture data breach could have been prevented or, at the very least, discovered sooner had the defendant implemented reasonable cybersecurity measures.

Affected individuals now face serious personal, social and financial ramifications due to Ashley Furniture’s negligence, the suit claims.

“Indeed, the reason why criminals steal information is to monetize it,” the lawsuit says. “They do this by selling the spoils of their cyberattacks on the black market to identity thieves who desire to extort and harass victims or to take over victims’ identities in order to engage in illegal financial transactions under the victims’ names.”

The case also takes issue with the “generic letter” Ashley Furniture sent data breach victims around May 7 of this year. Per the complaint, the notice failed to provide impacted customers with any meaningful support in the wake of the data breach beyond a one-year offer of credit monitoring and identity theft protection services.

“There has been no assurance offered by [the defendant] that all personal data or copies of data have been recovered or destroyed, or that it has adequately enhanced its data security practices sufficiently to avoid a similar breach of its network in the future,” the suit reads.

The lawsuit looks to represent anyone whose private information was compromised in the Ashley Furniture data breach between May 15 and June 5, 2023 and received a notice letter sent by or on behalf of the defendant.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.