Greensboro, N.C. – Greensboro College finds itself at the center of a legal battle as it faces a class-action lawsuit for its handling of a recent data breach, impacting thousands of individuals.

Review Completion and Breach Timeline

On February 5, 2024, Greensboro College announced the completion of its review into a data breach that occurred within its computer systems. The breach, spanning from August 10, 2023, to August 21, 2023, prompted an investigation into potentially malicious activity.

Sensitivity of Compromised Data

Sensitive personal information, including Social Security numbers, driver’s license numbers, financial account details, dates of birth, passport numbers, and medical and health insurance information, were among the data compromised during the breach.

Allegations in the Lawsuit

In March 2024, Greensboro College became the defendant in a class-action lawsuit regarding its response to the data breach. The lawsuit alleges that the college was aware of the breach as early as August 2023 but failed to notify affected individuals until February 29, 2024. Over 52,000 people are claimed to have suffered losses due to the breach.

Continued Vulnerability and Delayed Notification

The lawsuit further asserts that Greensboro College still retains the compromised data, leaving it vulnerable to additional cyber threats. Criticism is leveled at the college’s decision to wait six months before informing those affected, with the plaintiffs contending that earlier notification could have enabled individuals to better protect themselves.

Lack of Adequate Cybersecurity Measures

Accusations in the lawsuit suggest that Greensboro College’s failure to implement sufficient cybersecurity protocols contributed to the breach. The plaintiffs argue that the college’s negligence in this regard exacerbated the impact on affected individuals.

Legal Battle Ensues

As Greensboro College grapples with the aftermath of the data breach, the institution finds itself embroiled in a legal dispute that underscores the importance of robust cybersecurity measures and prompt notification in safeguarding sensitive personal information.

For individuals affected by the breach, the lawsuit represents a quest for accountability and restitution in the face of compromised data security.

Source