Two lawsuits filed against Hub over data breach
Reprints
Two putative class-action lawsuits were filed Friday and Monday in the same judge’s court in Chicago in connection with the cyber breach revealed by Hub International Ltd. earlier this month after a delay of several months.
The similarly worded lawsuits, Christopher Roy v. Hub International Ltd. and Shannan Ellis vs. Hub International, filed in U.S. District Court in Chicago by different attorneys, charge the Chicago-based broker with failing to properly safeguard about 479,000 individuals’ personal data, including their driver’s license numbers, Social Security numbers and financial account information.
Hub announced Aug. 11 that its systems had been breached between December 2022 and January 2023 and that it became aware of it on Jan. 17. The broker said in its announcement that its investigation was ongoing and that it had implemented additional security measures.
The Ellis lawsuit, filed Friday, states that the breach’s victims were not notified until seven months after it occurred and that the notice letter obscured the incident’s nature and threat by not saying how many people were impacted, how the breach happened and why it took so long to begin notifying the victims.
Both lawsuits charge the broker with negligence and unjust enrichment, among other charges.
Hub did not respond to a request for comment.
