NEWS    RECALLS    COMPLAINT FORM    SCAM ALERTS   RESOURCES  
Small Claims Guide   Class Actions   Lemon Laws   FAQ   Newsletters  
Share


Complain about a product or service

Automotive    Education    Employment    Electronics    Family    Finance    Health    Homeowners    Insurance    Pets    Shopping    Travel     Print This     Email This    



NEWS   Latest |  Archives |  Auto |  Cells, etc. |  Computers |  Financial |  Health |  Homeowners |  Parents |  Privacy |  Scams |  Seniors |  Travel

Courts Rule Against Data Breach Victims

Judges rule that actual, not potential, harm must be proven





by Martin H. Bosworth
ConsumerAffairs.com

September 3, 2007

Data Theft

68,000 CalOptima Members at Risk in Data Breach
Express Scripts Extortion Scheme Widens
Technology Could Be Key To Stopping Unauthorized Charges
T-Mobile: No Hacking in Data Breach
T-Mobile Confirms Data Breach
Consumers Increasingly Concerned About Online Transactions
Are Identity Theft Services Worth the Cost?
Online Tools Help Spot Financial Fraud
Financial Fraud Hits 7.5 Percent Of Americans In 2008
Feds Charge Mortgage Broker In Potential Data Breach
Millions of Credit Cards Exposed in Data Breach
2008 Data Breach Total Soars
Bank Data Breach Threatens 248,000 in North Carolina
GPS Not Foolproof
Countrywide Warns Millions of Data Breach
Thieves Steal AT&T Laptop with Employee Data
Report: Data Breach Disclosure Laws Don't Affect Identity Theft
Patient Information Exposed in Data Breach at Walter Reed
Supermarket Chain Reports Data Breach
Report: Feds Still Not Doing Enough To Secure Data
Data Thieves Hit Georgetown University Students, Faculty
800,000 Job Seekers At Risk In Gap Data Breach
TJX Data Breach Settlement Has Strings Attached
More ...

Individuals affected by massive data breaches have regularly filed lawsuits or joined class-action lawsuits against the offending company or agency in order to seek restitution for their personal lives being put at risk.

But several recent court decisions have weakened the individual's right to sue in case of a breach, ruling that the lack of actual harm precludes the plaintiffs from having a case.

An Ohio judge tossed out a lawsuit brought by two graduates of Ohio University over the institution's massive data breach by outside hackers. The judge ruled on August 29 that the plaintiffs failed to prove that specific harm had been caused as a result of the breach.

Donald Kulpa and Kenneth Neben claimed that Ohio University had failed to effectively protect their privacy, while the university argued that their suit was based on "vague fears" of potential damage in the future.

University president Roderick McDavis said that the university had already undertaken a top-to-bottom reconstruction of its information technology department to prevent further breaches.

"I understand how people felt when they learned that their data may have been exposed, because I was one of those people," McDavis said in a statement. "It can be frightening to think your personal information could be vulnerable."

"No individuals have suffered losses from this, though, and we remain hopeful that no one ever will," McDavis said. "I am pleased that the court agrees."

The Ohio University judgment followed a similar ruling in a lawsuit against Old National Bancorp over a 2005 data breach that exposed Social Security numbers and personal information.

The U.S. 7th Circuit Court of Appeals ruled on August 23 that the plaintiffs' claim of suffering "substantial potential economic damages" was insufficient, and that they had to demonstrate actual concrete damage from identity theft before being able to legitimately sue to seek restitution.

Victims of data breaches have exceptional difficulty proving actual harm to them in a court case, due both to the high number of data breaches in recent years, and the fragmented trail from a data breach to a case of fraud. Sophisticated hackers and data thieves will take data purloined from an outside hack or stolen equipment, and mix it with data from other sources to create "synthetic" identities that can fool credit agencies and fraud detection systems into thinking they are the genuine article. It can take months, or sometimes years, before a case of fraud or theft can be definitively linked to a data breach. A fraud ring operating in Florida was arrested in March 2007 for scams involving data stolen from the TJX company, in a massive data breach that went on for at least two years prior.

The financial industry and federal government agencies largely favor a "risk-based" notification standard, where consumers would only be notified of a breach if there was a direct threat of immediate harm.

Privacy and consumer advocates argue that any breach can potentially lead to identity theft, and are pushing state legislatures to pass stronger laws guaranteeing the right to sue an entity in case of a breach.



Report Your Experience
If you've had a bad experience -- or a good one -- with a consumer product or service, we'd like to hear about it. All complaints are reviewed by class action attorneys and are considered for publication on our site. Knowledge is power! Help spread the word. File your consumer report now.

Share

Follow us on Twitter.

FREE CONSUMER NEWSLETTERS

The Daily Consumer
Afternoons M-F

Sign up now!


Consumer News & Alerts
Every Sunday

Sign up now!





CONSUMER NEWS

SAFETY RECALLS

Back to the top |

Advertisement


Custom Search
AUTOMOTIVE
• Dealers
• Manufacturers
• Service
• Extended Warranties
• Lemon Laws
• Recalls
• Tires
• Transporters

FAMILY
• Aging
• Children, Parenting
• Recalls
• Dating
• Education
• Entertainment
• Pets
• Weddings
FINANCE
• Annuities
• Banks
• Credit Cards
• Debt Collection
• Debt Counseling
• Insurance
• Investing
• Loans
• Mortgages
• Payday Loans
• Student Loans
• Tax Prep

HEALTH
• Doctors
• Drugs, Pharmacies
• Health Clubs
• Hearing Care
• Hospitals
• Nursing Homes
• Nutrition, Diets
• Vision Care
• Weight Loss
HOUSE & HOME
• Appliances
• Cookware
• Furniture
• Home Improvements
• Lawn & Garden
• Movers
• Pools & Spas
• Realtors, Rental Agents
• Recalls
• Utilities

ELECTRONICS
• Cable TV/DBS
• Cameras
• Cell Phones
• Computers
• Home Electronics
• Internet Access
• Local Phone Service
• Long Distance
• VoIP
SHOPPING
• In-Home
• Online
• Retail Stores
• Sporting Goods
• Supermarkets
• Telemarketers

TRAVEL
• Airlines
• Bus Lines
• Car Rental
• Cruises
• Hotels
• Travel Agents
• Trains

RESOURCES
• Class Actions
• Complaint Form
• Small Claims Guide
• Lemon Laws
CONSUMER NEWS
• Latest News
• Automotive
• Telecom
• Financial
• Health
• Homeowners
• Scams
• Seniors
• Travel
• More ...

RECALLS
• Automotive
• Children's Products
• Drugs
• Food
• Household Products
• Sporting Goods

ABOUT US
• FAQ
• Privacy Policy
• Advertise With Us
• Newsroom
• Syndication
• Terms of Use

Terms of Use Your use of this site constitutes acceptance of the Terms of Use

Advertisements on this site are placed and controlled by outside advertising networks. ConsumerAffairs.com does not evaluate or endorse the products and services advertised. See the FAQ for more information.

Company Response Welcome If complaints about your company appear on our site, we welcome your response. Please see the Response Form for more information.

For more information, see the FAQ and privacy policy. The information on this Web site is general in nature and is not intended as a substitute for competent legal advice.  ConsumerAffairs.com Inc. makes no representation as to the accuracy of the information herein provided and assumes no liability for any damages or loss arising from the use thereof. 

Copyright © 2003-2009 ConsumerAffairs.com Inc.  All Rights Reserved.    The contents of this site may not be republished, reprinted, rewritten or recirculated without written permission.