Drug Free Workplaces Hit with Class Action Over Data Breach Announced in October 2023

New to ClassAction.org? Read our Newswire Disclaimer

Drug Free Workplaces USA faces a proposed class action over a cyberattack that reportedly occurred in the spring of 2023 and compromised the personal information of approximately 37,000 individuals.

Did you receive a data breach letter from Drug Free Workplaces? Let us know here.

The 72-page lawsuit says that Drug Free Workplaces, which provides drug testing services to employers, has reported that an unauthorized third party may have gained access to two employee email accounts between approximately March 29 and May 4, 2023. The suit relays that the cyberattack exposed the full names and Social Security numbers of consumers on whom the defendant has conducted drug testing.

The case argues that the incident was a direct result of the Florida-based company’s failure to implement reasonable cybersecurity practices to safeguard consumer data, which was allegedly housed in its network in a condition “vulnerable to cyberattacks.” According to the complaint, Drug Free Workplaces could have prevented the data breach by encrypting the files and adequately securing the servers containing the sensitive information.

The filing also charges that the defendant’s notice letter was untimely and lacked crucial information about the incident. For example, the notice failed to mention when the company first learned about the breach, how cybercriminals gained access to the network and what steps are being taken to better secure stored data in the future, the lawsuit shares.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

In light of the frequency of cyberattacks in recent years, Drug Free Workplaces should have understood the risks and taken commensurate measures to protect the data in its care, the suit contends.

The plaintiff, a Florida resident who had undergone a drug test with the defendant as part of his employer’s hiring process, says he received notice on October 27 of this year that his private information had been compromised in the breach.

The man claims that the incident has caused him to feel fearful, anxious and stressed, “which has been compounded by the fact that [the defendant] has still not fully informed him of key details about the data breach’s occurrence.”

The lawsuit looks to represent anyone in the United States whose personal information was maintained on the computer systems that were compromised in the data breach reported by Drug Free Workplaces in October 2023.

Did you receive a data breach letter from Drug Free Workplaces? Let us know here.