February 2024 Form I-9 Compliance Data Breach Sparks Class Action Lawsuit [UPDATE]

New to ClassAction.org? Read our Newswire Disclaimer

Form I-9 Compliance, LLC has been hit with a proposed class action lawsuit over a data breach that reportedly occurred in early Februrary 2024.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

According to the Form I-9 Compliance data breach notice letter, the California-based company, which helps clients complete government-required Form I-9 documents for employment, learned in April 2024 that an unauthorized third party had gained access to part of its computer network weeks prior, in on or around February 5 of this year.

The 70-page Form I-9 Compliance data breach lawsuit says the cyberattack compromised the names, dates of birth, addresses, hire dates and Social Security numbers of approximately 27,000 current and former employees of the company’s clients.

The data breach lawsuit contends that negligence on the defendant’s part resulted in the system intrusion, and that cybersecurity failures left the apparently unencrypted, unredacted information in the company’s network vulnerable to unauthorized disclosure.

As the case tells it, Form I-9 Compliance’s conduct is particularly inexcusable in light of the prevalence of data breaches in recent years and the heavy focus on cybersecurity. The complaint charges that the company should have understood the threat of a cyberattack and taken appropriate action to safeguard the sensitive data in its care.

As a result of the defendant’s alleged negligence, victims like the plaintiff—an Illinois resident formerly employed by a Form I-9 Compliance client—are now at a heightened and ongoing risk of being targeted for cybercrimes such as identity theft and fraud, the filing claims.

“The ramifications of [Form I-9 Compliance’s] failure to keep secure the [personally identifiable information] of [the plaintiff] and class members are long lasting and severe,” the case shares. “Once [personally identifiable information] is stolen—particularly Social Security numbers—fraudulent use of that information and damage to victims may continue for years.”

The lawsuit looks to represent anyone in the United States whose personal information was accessed and/or acquired by an unauthorized third party as a result of the data breach reported by Form I-9 Compliance in May 2024.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.