American Bar Association Sued Over Data Breach

By | April 25, 2023

A member of the American Bar Association (ABA) has filed a class-action lawsuit against the organization related to a recent data breach.

Tiffany Troy, on behalf of herself and other affected members, filed the suit in U.S. District Court for the Eastern District of New York on April 21, a day after the ABA reportedly began notifying affected members that a unauthorized third-party gained access to usernames and passwords used by members to access an old website of the association and the ABA Career Center.

Troy alleges the breach was caused by the association’s “knowing violation of its obligations to abide by best practices and industry standards…in an effort to save money by cutting corners on security measures that could have prevented or mitigated the breach.”

ABA, the largest voluntary association of lawyers in the world, said it realized on March 17 that an unauthorized party gained access to its network, and an investigation found that access was gained around March 6. ABA said in a statement there is no evidence the personal information obtained was misused.

The association did not alert members of the breach in a timely manner, according to Troy, who added that members suffered damages because they overpaid for membership since part of the fee was for implied security of personal identifiable information. Damages were also from “the costs associated with identity theft and the increased risk of identity theft,” and the “cost and value of time” spent by members to monitor their bank accounts.

Topics Lawsuits Cyber

Was this article valuable?

Here are more articles you may enjoy.