United of Omaha Life Insurance Company Hit with Data Breach Lawsuit Over April 2024 Phishing Attack [UPDATE]
Last Updated on March 5, 2025
Dobson v. United of Omaha Life Insurance Company
Filed: August 5, 2024 ◆§ 8:24-cv-00306
A class action claims United of Omaha failed to protect the personal data of approximately 538,000 people during an April 2024 cyberattack.
March 5, 2025 – United of Omaha Data Breach Settlement Website Is Live
Details are now available regarding the United of Omaha class action settlement described below.
Get more information about the United of Omaha data breach settlement.
Are you owed unclaimed settlement money? Check out our class action rebates page full of current class action settlements.
September 5, 2024 – Settlement Reached in United of Omaha Data Breach Lawsuits
The proposed United of Omaha data breach class action detailed on this page has been settled.
According to case records, the plaintiff’s counsel submitted a notice of settlement with the court on August 23, 2024, just weeks after initially filing the suit. In a four-page joint motion filed the same day, the parties relayed that an agreement had been reached to settle three related lawsuits arising from the data breach, including the one detailed here. The parties said they anticipate submitting official settlement documents in the next two months.
ClassAction.org will update this page if and when details of the settlement become available in court documents, so be sure to check back often.
Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.
A proposed class action lawsuit claims United of Omaha Life Insurance Company failed to protect the personal data of approximately 538,000 people during an April 2024 cyberattack.
Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.
The 58-page United of Omaha data breach lawsuit relays that on April 23, 2024, the company discovered that an unauthorized actor had accessed an employee's email account. Per the case, a subsequent investigation of the unauthorized access, which was reportedly linked to a phishing campaign targeting United of Omaha employees, determined that the email account was compromised between April 21 and April 23.
The data breach suit says the incident exposed the private information of current and former employees of the company’s clients, potentially including individuals’ full names, Social Security numbers, driver’s license numbers, employment data, health insurance policy numbers, limited medical information, and certain demographic details such as addresses or dates of birth.
The complaint contends that despite United of Omaha’s legal obligation to protect the sensitive information in its care, the company failed to implement proper cybersecurity protocols to safeguard the data, which it allegedly stored unencrypted and in a “reckless manner” in its computer systems.
In addition, the filing claims the defendant’s data breach notice letter was untimely and lacks crucial details about the cyberattack. The notice letter, which the company began to issue victims in late July 2024, fails to explain the nature of the breach, the identity of the perpetrators and what steps are being taken to secure stored information in the future, the suit charges.
What’s more, the case argues that United of Omaha’s offer of complimentary identity monitoring services for 12 months is “wholly inadequate” given the lifelong harm victims now face following the unauthorized exposure of their personal data.
The United of Omaha lawsuit looks to represent anyone in the United States whose private information was accessed and/or acquired by an unauthorized party as a result of the data breach reported by the company in July 2024.
Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.
Video Game Addiction Lawsuits
If your child suffers from video game addiction — including Fortnite addiction or Roblox addiction — you may be able to take legal action. Gamers 18 to 22 may also qualify.
Learn more:Video Game Addiction Lawsuit
Depo-Provera Lawsuits
Anyone who received Depo-Provera or Depo-Provera SubQ injections and has been diagnosed with meningioma, a type of brain tumor, may be able to take legal action.
Read more: Depo-Provera Lawsuit
How Do I Join a Class Action Lawsuit?
Did you know there's usually nothing you need to do to join, sign up for, or add your name to new class action lawsuits when they're initially filed?
Read more here: How Do I Join a Class Action Lawsuit?
Stay Current
Sign Up For
Our Newsletter
New cases and investigations, settlement deadlines, and news straight to your inbox.
Before commenting, please review our comment policy.