State Farm Mutual Automobile Insurance Company is the defendant in a new proposed class action. The lawsuit was filed over the theft of sensitive consumer information by an individual “subject to control” by the company who the complaint says stole the data on a portable electronic storage device. According to the case, stolen information included data on ongoing litigation and disputes; discovery and investigation materials; names; dates of birth; Social Security and driver’s license numbers; and financial and medical records.
Despite State Farm becoming aware of the data breach around December 30, 2016, the 21-page lawsuit takes issue with how long the company is believed to have waited to inform consumers that their sensitive personal information may have been compromised. The case notes consumers were first notified of the data breach by mail on July 3, 2017, more than half a year after State Farm became aware of the theft. The lawsuit alleges that in the span between December 2016 and July 2017, State Farm gave identity thieves “unfettered access” to proposed class members’ personally identifiable information.