In the heart of Ohio, a legal storm is brewing against The Cornwell Quality Tools Company, a manufacturer of tools for the automotive and aviation industries. The company is facing a class-action lawsuit filed by William Hudson, a disgruntled customer, on behalf of himself and others who have allegedly been victims of a data breach.
The lawsuit, filed on September 28, 2023, in the United States District Court for the Northern District of Ohio, paints a grim picture of a company that, according to Hudson, failed to adequately protect the personally identifiable information (PII) of its customers.
"On September 22, 2023, an unknown actor gained access to Defendant's inadequately protected computer systems, resulting in a data breach," the lawsuit reads. This breach, the lawsuit alleges, allowed cybercriminals to steal PII, including names and Social Security numbers, of approximately 11,884 individuals.
The lawsuit further alleges that the company delayed notifying affected individuals, giving cybercriminals time to exploit the stolen PII. Hudson and the other class members claim they have suffered and will continue to suffer damages, including identity theft, lost time, expenses mitigating harms, increased risk of harm, damaged credit, and loss of privacy.
The legal crux of the lawsuit revolves around allegations of negligence, breach of duty, and violation of legal obligations. Hudson asserts that Cornwell Quality Tools had a legal and equitable duty to protect and safeguard the PII of its customers but failed to do so. "Defendant's negligence and failure to implement reasonable security measures allowed cybercriminals to steal PII," Hudson alleges in the lawsuit. This, he claims, is a clear violation of the company's legal obligations. Hudson and the class members are seeking compensatory damages, reimbursement of out-of-pocket costs, injunctive relief, attorney fees, and other remedies deemed appropriate by the Court. The lawsuit brings to light the importance of data security in an increasingly digital world. Companies that collect and store personally identifiable information have a legal and ethical responsibility to protect that data. Failure to do so can result in serious consequences, both for the affected individuals and the company itself. It's a cautionary tale for other businesses, a stark reminder of the potential legal and financial fallout of a data breach. And for the alleged victims, it's a fight for justice and compensation for the damages they claim to have suffered. As the legal battle unfolds, it serves as a stark reminder of the importance of data security and the potential consequences of failing to adequately protect customer information.