Data Breach Lawsuit Claims AGC America Failed to Protect Employee Info During Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action claims AGC America, Inc. failed to protect the personal data of current and former employees during a December 2023 cyberattack.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 70-page AGC America data breach lawsuit relays that the Georgia-based company, a subsidiary of Japanese glass manufacturer AGC, experienced a cybersecurity incident in mid-December 2023 that disrupted the functionality of its network. Per the suit, a subsequent investigation later determined that an unauthorized third party had accessed the company’s system and obtained certain files stored therein between December 12 and December 17 of that year.

According to the case, the compromised files contained AGC employees’ private information, such as names, Social Security numbers, driver’s license numbers, financial account details, passport information, payment card numbers, company network login credentials and certain health insurance plan enrollment data for current and former participants.

As the complaint tells it, the “foreseeable and preventable” cyberattack was a direct result of the defendant’s failure to maintain adequate data security protocols to safeguard employee information, which was allegedly stored unencrypted and in a vulnerable condition in AGC’s network.

The data breach suit asserts that affected individuals are at an increased risk of identity theft and fraud, as their confidential information is now “in the hands of data thieves.”

In addition, the filing contends that the company’s notification of data breach victims was untimely and inadequate, as notice letters were sent nearly two months after the incident was purportedly discovered and failed to provide crucial details about the event to impacted individuals.

Without essential details—such as how cybercriminals gained access to the system and what steps are being taken to protect stored data in the future—victims’ ability to mitigate the consequences of the data breach is substantially weakened, the case argues.

The lawsuit looks to represent anyone in the United States whose private information was accessed and/or acquired by an unauthorized third party as a result of the data breach reported by AGC America in February 2024.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.