Insurance Brokerage Firm Keenan & Associates Hit with Class Action Over Cyberattack Affecting 1.5M

New to ClassAction.org? Read our Newswire Disclaimer

Keenan & Associates faces a proposed class action over an August 2023 cyberattack that compromised the personal and medical data of more than 1,500,000 people.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 49-page Keenan data breach lawsuit says the insurance consulting and brokerage firm detected “disruptions” on certain network servers on August 27, 2023. According to the amended complaint, a subsequent investigation revealed that an unauthorized third party had gained access to Keenan’s computer systems at various times between roughly August 21 and August 27 and exfiltrated certain data from the network.

Per the suit, the sensitive information compromised in the breach included individuals’ names, dates of birth, Social Security numbers, passport numbers, general health data, driver’s license numbers and health insurance details.

The data breach lawsuit claims the incident stemmed directly from Keenan’s failure to implement and follow “even the most basic” cybersecurity protocols to protect the private information in its care.

To make matters worse, although the company purports to have discovered the cyberattack in August of last year, it waited until late January 2024 to begin notifying victims, the case points out.

As the filing tells it, Keenan’s allegedly negligent actions will have lifelong consequences on affected individuals.

“[The plaintiff] and Class Members face an increased risk of identity theft, phishing attacks, and related cybercrimes because of the Data Breach,” the complaint asserts. “Those impacted are under heightened and prolonged anxiety and fear, as they will be at risk for falling victim to cybercrimes for years to come.”

The lawsuit looks to represent anyone in the United States whose private information was compromised as a result of the Keenan & Associates data breach, including those who were sent notice of the incident on or around January 26, 2024.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.