A class action lawsuit has been proposed against US Truck manufacturer, Navistar for a data breach that exposed current and former employee information. Victims are claiming the compromised data was a consequence of the company being negligent and reckless” with their attempts to properly safeguard sensitive data and implement sufficient security methods.
Navistar has posted a notification of the incident to those potentially affected on their website. Included in the statement is a timeline and summary of the events beginning in May 2021 when the company was first alerted of the data breach. The company claims to have responded by immediately in accordance to their cyber security response plan. With the assistance of third-party cyber security experts, Navistar then conducted an investigation which confirmed that on May 31, “an unauthorized third party had accessed and taken certain data from Navistar’s IT systems.”
In June, the Navistar publicly reported the incident with the SEC and by August 20th it was revealed that the compromised data included various PII for current and former employees such as health plan details, retiree health benefit and life insurance plan information, social security numbers, and more.
As per the details of the suit, those affected by the incident were not made aware of the incident until late in September. The outlined grievances of the case will revolve around the financial injuries, lost time, and significant emotional damages incurred by the victims.