Clients Seek Damages from Regal Securities in Lawsuit Over Data Breach

In the world of finance, trust is paramount. When John Hoffman entrusted his personal information to Regal Securities, Inc., a financial company offering traditional brokerage, insurance support, and fee-based advisory services, he expected it to be safeguarded. Instead, he found himself at the center of a cyberattack and data breach that compromised his sensitive personal information, along with that of countless others.

Regal Securities, a well-known financial firm, has been accused of failing to implement reasonable and industry-standard data security practices. This alleged negligence led to a significant data breach, resulting in the unlawful access to the personal information of many of its clients, including Hoffman. The compromised data included full names, dates of birth, financial account numbers, and even Social Security numbers.

The lawsuit, filed in the United States District Court for the Northern District of Illinois, alleges that Regal Securities recklessly maintained the Personally Identifiable Information (PII) of Hoffman and other clients, leaving it vulnerable to cyberattacks. The defendant is accused of disregarding the rights of Hoffman and the class members by failing to take adequate measures to secure the PII and provide timely and accurate notice of the data breach.

"The sensitive personal information of the plaintiff and class members was compromised and unlawfully accessed during the data breach," the lawsuit states. "The stolen PII remains in the hands of cybercriminals who target it for identity theft and fraud."

The legal ramifications of such a breach are significant. The lawsuit alleges multiple violations, including negligence, breach of implied contract, and violation of federal and state laws, such as the Illinois Consumer Fraud and Deceptive Business Practices Act, the Illinois Personal Information Protection Act, and the Illinois Uniform Deceptive Trade Practices Act.

These laws are designed to protect consumers from deceptive business practices and to ensure the safe handling of personal information. For example, the Illinois Consumer Fraud and Deceptive Business Practices Act prohibits unfair methods of competition and unfair or deceptive acts or practices in the conduct of any trade or commerce. The Illinois Personal Information Protection Act requires entities that collect personal information to implement and maintain reasonable security measures to protect those records from unauthorized access, acquisition, destruction, use, modification, or disclosure.

The lawsuit alleges that Regal Securities' failure to implement adequate and reasonable cybersecurity procedures and protocols clearly violates these laws. Furthermore, the plaintiff argues that the defendant's offer of 25 months of identity monitoring services is inadequate given the potential long-term impacts of the data breach.

"The compromised PII may be used for identity theft, fraud, and other criminal activities," the lawsuit states. "Plaintiff and class members face a heightened and imminent risk of fraud and identity theft."

The damages sought by the plaintiff and the class members include lost or diminished value of PII, lost opportunity costs associated with mitigating the consequences of the data breach, invasion of privacy, increased spam calls, texts, and emails, and out-of-pocket costs for credit monitoring services and other protective measures.

The lawsuit is a stark reminder of the importance of data security in today's digital age. As the case unfolds, it will undoubtedly serve as a cautionary tale for companies that handle sensitive personal information, underscoring the need for robust cybersecurity practices and protocols.

‍