Major insurance company faces class action lawsuit after hackers posted health information online

Liberty Mutual is being sued in a class action alleging it failed to safeguard the personal information of thousands of policyholders during a recent data breach.

Plaintiffs claim Liberty Mutual failed to protect their personally identifiable information, including health information, which was accessed by a criminal ransomware group called Everest, according to TopClassActions.com .

“Plaintiffs have since discovered that Everest has added [Liberty Mutual] to its dark web leak site, where their private information, including their highly sensitive medical records, may be posted for any nefarious actor to view, download and use to commit crimes against plaintiffs and class members, including identity theft and fraud,” the lawsuit says.

The lawsuit alleges that Liberty Mutual failed to encrypt or redact the sensitive information. Plaintiffs claim the data was compromised due to the company’s negligent failure to protect customers.

Liberty Mutual faces multiple claims including negligence, breach of implied contract, invasion of privacy and violations of the Massachusetts Consumer Protection Act.

Plaintiffs seek to represent consumers whose personal information was accessed in the Liberty Mutual ransomware attack, including a nationwide class and a Massachusetts subclass of consumers.

Plaintiffs are asking for a jury trial, declaratory and injunctive relief, and actual, statutory, exemplary and punitive damages for themselves and all class members.

The class action lawsuit against Liberty Mutual is Francis, et al. v. Liberty Mutual Insurance Co., filed in the U.S. District Court for the District of Massachusetts.