SAG-AFTRA Members File Class Action Complaint Against Health Plan Over Recent Data Breach

deadline.com:

Two SAG-AFTRA members filed a class action lawsuit against the union’s health plan, claiming that it failed to make adequate safeguards to prevent a recent data breach.

The lawsuit was filed on Dec. 5 by members Matthew Rouillard and Kristy Munden, and seeks class action status. “SAG Health failed to protect the very customer information it was entrusted, compromising the personal information of an undisclosed number of its members,” the lawsuit alleged.

It was filed in U.S. District Court in Los Angeles. The data breach was disclosed on Dec. 2 as SAG-AFTRA notified members of an email phishing attack.

Read the members’ SAG-AFTRA Health Plan lawsuit. The lawsuit contended that SAG Health “failed to comply with industry standards to protect information systems that contain Private Information, and failed to provide timely and adequate notice to Plaintiffs and other members of the Class that their Private Information had been accessed and compromised.” The suit claimed that members were hit with “out-of-pocket expenses associated with preventing, detecting, and remediating identity theft, social engineering, and other unauthorized use of their Private Information,” as well as other injuries including the increased risk of fraud and identity theft.