NEW CASTLE, Penn.–First Choice FCU has filed a class action lawsuit against the convenience store WaWa following its recent data breach.
In its filing in the U.S. District Court for the Western District of Pennsylvania, which can be found here, First Choice alleges “Plaintiff brings this class action on behalf of financial institutions that suffered, and continue to suffer, financial losses as a direct result of WaWa’s conscious failure to take adequate and reasonable measures to protect its point-of-sale payment terminals, fuel dispensers, and payment processing servers. WaWa’s actions left highly sensitive Payment Card Data, including, but not limited to, the cardholder name, credit or debit card number, and expiration date of Plaintiff’s members exposed and accessible for use by hackers from at least March 4, 2019, through Dec. 12, 2019, at which time WaWa claims the breach was contained. As a result, Plaintiff has and will incur significant damages in replacing members’ payment cards and covering fraudulent purchases, among other things.”
The credit union’s complaint goes on to state, “The Data Breach was the inevitable result of WaWa’s inadequate data security measures and lackadaisical approach to the security of its customers’ Payment Card Data.”
The $45.3-million First Choice FCU has approximately 6,600 members.
Experian to Pay $24 Million to Settle Class Action
Separately, Atlanta-based Experian has agreed to a $24-million settlement with 56,000 Americans who had their credit reports tainted by data from an online payday lender. The settlement follows a 2016 class action filed by a woman in Gwinnett County, Ga., who said her credit report was suffering due to a delinquency reported by Western Sky Financial. The South Dakota-based Western Sky Financial sold more than 18,000 loans in Georgia with interest rates as high as 340%, according to the Georgia Attorney General’s office.
The lawsuit claimed Experian continued reporting delinquent debts on predatory loans from the company, which has been widely and publicly discredited for its practices across the country, reported the Atlanta Journal Constitution. In its settlement filing, Experian pointed out that a judge hadn’t found evidence that Experian “willfully” failed to comply with the Fair Credit Reporting Act, the report added.
Experian is expected to set up a claims website to inform those victims how to collect if the settlement gets final approval in court.
Company Sought Tribal Law Protection
“Because Western Sky was owned by a member of the Cheyenne River Sioux Indian Reservation, the company maintained that it wasn’t subject to state or federal laws,” the Journal Constitution reported. “In fact, the lawsuit said, the company was an LLC organized under South Dakota law, not tribal law, making it subject to the same laws as any lender. Between early 2010 and late 2013, Western Sky sold loans in states where it wasn’t licensed to lend, including Georgia. Payday loans of $3,000 or less in Georgia are void if the lender has no license.”