Aptos, Inc. and Tempur Sealy International, Inc. are on the receiving end of a proposed class action lawsuit filed by a consumer who claims her personal information was stolen during a data breach involving the defendants. According to the suit, Aptos hosts and maintains the online payment system for Tempur Sealy’s website, Tempurpedic.com. Aptos’s system was allegedly compromised in February 2016, exposing Tempur Sealy customers to risk of identity theft. The plaintiff claims Aptos learned of the security breach in November 2016, but did not notify Tempur Sealy until February 2017. In turn, Tempur Sealy supposedly waited almost two months to warn its customers of the breach. Upon learning of the possible exposure of her personal data, the plaintiff checked her bank statements and noticed a fraudulent charge from April 2016, for which she was not reimbursed. She argues that Aptos and Tempur Sealy should have implemented more effective security systems and notified customers sooner to ensure the safety of their personal data.