Sam’s Club and Cleo Communications Face Class-Action Lawsuit over Data Breach
## Introduction
Sam’s Club and vendor Cleo Communications are facing a class-action lawsuit alleging that they failed to take reasonable security measures to prevent a data breach. The breach resulted in unauthorized access and disclosure of customers’ and employees’ sensitive personal data.
## Allegations
The plaintiff claims that the companies collected personally identifiable information without encrypting it or deleting it when it was no longer needed. Additionally, the defendants allegedly failed to ensure their data systems were protected from unauthorized intrusion and did not provide prompt and accurate notice of the breach.
## Lawsuit Details
The plaintiff is seeking damages for negligence, breach of implied contract, and unjust enrichment and has demanded a jury trial. Sam’s Club has stated that the claims have no merit and will aggressively defend against the litigation, while Cleo Communications has not yet commented on the matter.
## Connection to Cleo’s File Transfer Software Vulnerabilities
The lawsuit comes following Sam’s Club’s confirmation of a potential cyber attack, which was linked to vulnerabilities in Cleo’s file transfer software. Other companies affected by the Cleo breach include WK Kellogg Co., Blue Yonder, and Hertz, all of which have faced similar class-action complaints.
## Importance of Cybersecurity Measures and Employee Awareness
Data breaches targeting employers and HR vendors have become increasingly common, highlighting the need for robust cybersecurity measures and employee awareness. HR professionals can take steps to prevent data loss through phishing schemes and other methods by educating employees and implementing stringent security protocols.
## Reminder of the Value of HR Data and Safeguarding Sensitive Information
This incident serves as a reminder of the value of HR data to cybercriminals and the importance of safeguarding sensitive information. Employers and HR vendors must remain vigilant in their efforts to protect employee and customer data from unauthorized access and disclosure.