MFLEX Facing Class Action Over Data Breach Announced in February 2024

New to ClassAction.org? Read our Newswire Disclaimer

Multi-Fineline Electronix, Inc. (MFLEX) faces a proposed class action over a month-long data breach that exposed the private information of current and former employees and their beneficiaries.

Did you receive a data breach notice from MFLEX? Let us know here.

The 67-page data breach lawsuit says that MFLEX—a flexible printed circuit manufacturer, assembler and supplier—experienced a security incident during which an unauthorized party reportedly gained access to the company’s computer network between December 1, 2022 and January 2, 2023.

Per the case, MFLEX didn’t discover the breach until around January 31, 2024, over a year after the incident had concluded.

The complaint claims that the intrusion compromised individuals’ private information, including their names, dates of birth, Social Security numbers, driver’s license or state identification numbers, financial account numbers and access details, payment card numbers and access information, passport numbers, usernames and passwords, and medical and health insurance data.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

According to the suit, the cyberattack was a direct result of MFLEX’s failure to take adequate cybersecurity measures to secure confidential data, which it stored unencrypted in its computer systems.

The filing argues that data breach victims are now at an increased risk of identity theft and fraud and “face years of constant surveillance of their financial and personal records,” thanks to the defendant’s negligence.

The plaintiff, a New Jersey resident who received a data breach notice letter from MFLEX despite not being familiar with the company, says Experian informed him that his private information has since been disseminated on the dark web.

The complaint shares that the defendant waited until February 8, 2024 to begin notifying affected individuals. However, the notice letter failed to include essential information about the cyberattack, such as details about its root cause and what steps are being taken to prevent future breaches, the filing contends.

“The data breach has caused [the plaintiff] to suffer fear, anxiety, and stress, which has been compounded by the fact that [the defendant] has still not fully informed him of key details about the data breach’s occurrence,” the case says.

The lawsuit looks to represent anyone in the United States whose private information was impacted as a result of the data breach announced by MFLEX in February 2024.

Did you receive a data breach notice from MFLEX? Let us know here.