Mortgage Company On Q Financial Facing Class Action Over Cyberattack Affecting 211K People

New to ClassAction.org? Read our Newswire Disclaimer

On Q Financial, an Arizona-based mortgage company, has been hit with a proposed class action lawsuit over a data breach announced in March 2024.

Did you receive a data breach letter from On Q Financial? Let us know here.

The 57-page data breach lawsuit says the cyberattack compromised the names and Social Security numbers of approximately 211,000 current and former On Q Financial customers.

According to On Q Financial’s data breach notice letter, the mortgage company was affected by a vulnerability in an IT vendor’s software program, which the defendant used for remote access to computers in its network. The notice letter shares that the vulnerability allowed an unauthorized third party to access the computer system and exfiltrate customer data stored therein.

As the suit tells it, On Q Financial did not implement proper cybersecurity protocols necessary to protect customers’ private information, such as encrypting or deleting the data when it was no longer needed. The case claims the company’s failure to take reasonable data security measures left the highly sensitive information in a “dangerous condition.”

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

As a result of the defendant’s negligence, the complaint alleges that victims like the plaintiff—a Florida resident—now face a lifelong threat of identity theft, fraud and other illegal schemes.

Moreover, the filing contends that On Q Financial’s notice letter was untimely and omitted important details, without which victims’ ability to mitigate the consequences of the incident is significantly reduced.

The plaintiff says that the unauthorized disclosure of her personal information has caused her to feel fearful, anxious and stressed, “which has been compounded by the fact that [On Q Financial] has still not fully informed her of key details about the Data Breach’s occurrence.”

The lawsuit looks to represent anyone in the United States whose private information was accessed and/or acquired by an unauthorized third party as a result of the data breach reported by On Q Financial in March 2024.

Did you receive a data breach letter from On Q Financial? Let us know here.