Data Breach Lawsuit Alleges Knight Barry Failed to Protect Customer Info from Hackers

New to ClassAction.org? Read our Newswire Disclaimer

Knight Barry Title, Inc. faces a proposed class action over a 2023 cyberattack that compromised the personal data of current and former clients.

Did you receive a data breach letter from Knight Barry? Let us know here.

According to the 31-page data breach lawsuit, an unauthorized third party reportedly gained access to the title insurance company’s computer network between July 25 and August 15, 2023. The suit relays that as a result of the cyberattack, the threat actor potentially acquired private information belonging to customers, such as full names, addresses, Social Security numbers, government-issued ID details and financial account data.

The case argues the data breach was a direct result of “multiple failings” on the part of Knight Barry. For one, the company failed to implement adequate cybersecurity protocols to protect the data in its care, the complaint alleges.

In addition, Knight Barry did not discover the unauthorized intrusion for weeks after the breach occurred, which allowed cybercriminals to “freely” access and exfiltrate sensitive customer information during this time, the filing contends.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

Per the lawsuit, the company also failed to timely notify data breach victims. Although the defendant purports to have learned of the incident on August 15, 2023, it did not distribute notice letters to impacted individuals until nearly six months later, the suit shares.

The case claims this delay “virtually ensured” that the data thieves could “monetize, misuse and/or disseminate” the confidential information before victims could take steps to protect their data.

Knight Barry has offered one year of credit monitoring services to victims, which the complaint claims is the company’s “meager attempt” at mitigating the effects of the data breach.

“Much of the Private Information that was stolen is immutable and 1 year of credit monitoring is nothing in the face of a life-long heightened risk of identity theft,” the filing asserts.

The lawsuit looks to represent anyone in the United States whose private information was accessed in the Knight Barry data breach.

Did you receive a data breach letter from Knight Barry? Let us know here.