In what can be seen as another step towards holding corporations accountable for their data security practices, the U.S. District Court for the Northern District of Georgia has approved a proposed $750,000 class settlement. The case is between a regional bank and consumers who were affected when a third-party property insurance validation vendor was compromised by hackers, leading to the exposure of consumer information. This settlement comes after the consolidation of multiple other suits against the bank, due to the May 2022 data breach. The announcement was made earlier this month.
The ruling highlights the increasing scrutiny courts place on corporations for data breaches, especially when third-party vendors are involved. Given the sensitive nature of consumer information regional banks tend to handle, the ruling creates an important precedent for future cases. The impetus for subsequent litigation came after multiple suits were brought against the bank.
The critical role third-party vendors play in maintaining data security is underlined by this case. Companies employing third-party vendors for the handling and validation of customer information must ensure these vendors follow stringent data security practices. It has been indicated that the $750,000 settlement will be paid to affected consumers as reparation for the data breach caused by the bank’s vendor.
The full details of the case, including the court’s judgment, are available for further examination here.
As such, all legal professionals – especially those working in corporations that handle large amounts of consumer data – should understand the consequences and implications of such litigation and take necessary action to prevent data breaches. Careful scrutiny of third-party data security practices is now more critical than ever.