November 2022 Concord Music Group Data Breach Sparks Class Action Lawsuit

New to ClassAction.org? Read our Newswire Disclaimer

Concord Music Group has been hit with a proposed class action over a November 2022 data breach that affected more than 3,000 people.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

According to the 45-page data breach lawsuit, an unauthorized third party gained access to Concord’s network between November 14 and November 18, 2022. During the cyberattack, the threat actor reportedly obtained certain files stored in the company’s system containing the names, Social Security numbers and financial account information of Concord’s clients, the suit relays.

The case contends that Concord, a global record company headquartered in Nashville, Tennessee, failed to take reasonable cybersecurity measures to protect the private information from unauthorized disclosure.

The company also failed to promptly warn victims about the incident, the complaint claims. Although Concord purports to have discovered the data breach on November 16, 2022, it waited to notify impacted clients until “well over a year later,” on February 1 of this year, the filing charges.

The New Jersey plaintiff, a client who collects inherited royalties from Concord, received notice from the company in early February informing her that her personal data had been compromised in the breach, the suit says. The woman says she has already experienced fraud as a result of the incident, having been notified by her bank and other institutions of multiple unauthorized attempts to withdraw money from her accounts, cash fraudulent checks and connect other financial accounts to hers.

“Additionally, [the plaintiff] has spent considerable time and effort attempting to remediate the harmful effects of the Data Breach, including seeking legal advice in response to the [incident], and to prevent further fraudulent withdraws [sic] and damages, as well as time and effort to monitor her accounts to protect herself from additional identity theft,” the case shares.

The lawsuit looks to represent anyone whose personal information was compromised as a result of the November 2022 data breach experienced by Concord, including those who received notice of the incident.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.