Gerson Lehrman Group Hit with Class Action Over Cyberattack Affecting 152K People

New to ClassAction.org? Read our Newswire Disclaimer

Gerson Lehrman Group (GLG) faces a proposed class action over a cyberattack announced in March 2024 that compromised the personal data of more than 152,000 individuals.

Did you receive a data breach letter from Gerson Lehrman Group? Let us know here.

The 43-page data breach lawsuit claims the New York City business services and consulting firm “negligently” failed to protect individuals’ names and Social Security numbers during a ransomware attack in which an unauthorized third party gained access to certain files stored in GLG’s computer systems.

The suit contends the data breach stemmed from the company’s failure to implement proper cybersecurity protocols and monitor its network for unauthorized intrusion. According to a notice provided to the Maine Attorney General’s office, the hack took place in November 2023 and wasn’t detected until February 2024.

“Had GLG properly monitored its networks, it would have discovered the Breach sooner,” the case charges.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The plaintiff, a Georgia resident affiliated with GLG, says he received notice from the company in mid-March of this year informing him that his private data had been exposed in the breach. Like other victims, the plaintiff now faces a lifelong risk of fraud, identity theft and other forms of personal and financial harm, the complaint asserts.

In addition, the filing takes issue with GLG’s allegedly inadequate notice letter. Aside from providing a list of “generic steps” that impacted individuals can take to protect themselves and extending one year of credit monitoring services, the defendant has offered “no other substantive steps” to help victims mitigate the consequences of the breach, the case claims.

The lawsuit looks to represent anyone in the United States whose private information was accessed and/or acquired as a result of the GLG data breach, including those who were sent notice of the incident.

Did you receive a data breach letter from Gerson Lehrman Group? Let us know here.