Numrich Gun Parts Sued Over 2022 Data Breach Affecting More Than 45K Online Customers

New to ClassAction.org? Read our Newswire Disclaimer

Numrich Gun Parts Corporation faces a proposed class action over its alleged failure to safeguard the sensitive personal and financial information of more than 45,000 online customers from unauthorized access. 

The 23-page case against the firearms parts maker centers on a data breach said to have occurred between January 23 and April 5, 2022. According to the filing, Numrich became aware of “suspicious activity” on its website, gunpartscorp.com, on March 28, learning eventually that hackers had accessed at least 45,169 online customers’ personal information and payment card data. 

The lawsuit charges that Numrich had within its systems “a treasure trove of useful information attractive to hackers,” who could use the data to cause real damage to consumers. The case alleges that upon discovering the incident, and prior to informing data breach victims, Numrich “placed its personal financial gains ahead of its customers’ interests” when it refused to shut down its website.

“On information and belief, cybercriminals were able to breach Numrich’s website and system because Numrich did not maintain reasonable security safeguards or protocols to protect its customers’ [personal and payment card data], leaving it an unguarded target for theft and misuse,” the complaint reads. 

According to the case, the stolen data included, at minimum, Numrich customers’ names, addresses, and payment card numbers, security codes and expiration dates. 

The complaint says that when Numrich finally notified customers of the incident, the company “deliberately downplayed the breach’s severity and misrepresented that it was ‘unaware of any actual misuse of information’” related to the incident. The company’s data breach notice, the lawsuit alleges, “obfuscated the nature of the breach” and the threat it posed to consumers, in particular given Numrich, the case says, refused to relay how many people were impacted, how the breach happened or “why it took over two months for Numrich to send a bare-bones notice.” 

Upon information and belief, the lawsuit says, the customer information compromised in the hack is still stored in Numrich’s systems. 

The case looks to cover all persons in the United States whose personal and financial information was compromised in the data breach disclosed by Numrich in June 2022. 

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.