WINSTON-SALEM, N.C.–Truliant Federal Credit Union faces a proposed class action lawsuit after a data breach reportedly exposed the private information of more than 48,000 members.
According to ClassActions.org, a 33-page complaint says the cyberattack targeted the computer network of co-defendant Doxim, Inc., a third-party service provider Truliant formerly contracted with.
Notification Made in April
According to the case cited by ClassActions.org, Doxim notified the credit union in late April 2024 that there had been unauthorized access to Truliant files from 2012 stored in its system.
“In a notice letter sent to affected customers around May 14, 2024, Truliant stated that the incident compromised victims’ names, Social Security numbers, account numbers and financial information, the filing says,” ClassActions.org reported. “Customers’ addresses and dates of birth may have also been impacted, the suit alleges.”
‘Failure to Implement’ Alleged
The report goes on to note the lawsuit claims the breach—which was detected on December 30, 2023, according to Doxim’s notice letter to affected credit union members—was the direct result of the defendants’ failure to implement adequate cybersecurity protocols.
“Per the case, the companies left consumers’ sensitive information “accessible, unencrypted, unprotected, and vulnerable” to cybercriminals,” ClassActions.org said.
The plaintiffs state in their suit, “Armed with the [personally identifiable information] accessed in the data breach, data thieves can commit a variety of crimes, including opening new financial information in class members’ names, taking out loans in class members’ names, using class members’ names to obtain medical services, and using class members’ [personally identifiable information] to target other phishing and hacking intrusions,” ClassActions.org reported.
Additional Allegations
It added the complaint also takes issue with Truliant’s alleged failure to provide affected individuals with adequate protective services, and that the defendants have failed to disclose crucial information about the incident.