LAS VEGAS (FOX5) — A California man has filed a federal class action lawsuit against Wynn Resorts, alleging the casino failed to protect the information of more than 800,000 customers in a data breach earlier this month.

The complaint, filed Feb. 21, alleges that a hacking group called “ShinyHunters” announced on Feb. 20, that it had stolen more than 800,000 records from the resort containing customers’ personally identifiable information, including names, Social Security numbers, and dates of birth.

The lawsuit alleges Wynn Resorts stored the data without encryption and failed to implement adequate cybersecurity measures, including multi-factor authentication and staff security training. The complaint also alleges the company’s breach notification letter omitted the identity of the attackers, the root cause of the breach, and what remedial steps were taken.

The complaint states Wynn Resorts offered affected customers 24 months of identity monitoring services, but argues the length of services offered is insufficient. The lawsuit further argues that most victims of data breaches face identity theft and financial fraud for multiple years, but the offer would expire far before then.

The lawsuit brings seven counts against Wynn Resorts, including negligence, negligence per se, unjust enrichment, invasion of privacy, breach of fiduciary duty, breach of implied contract, and a request for declaratory judgment.

Plaintiffs are seeking compensatory and consequential damages, injunctive relief requiring Wynn Resorts to strengthen its data security systems, mandatory annual security audits, and continued credit monitoring for all class members.

As of Tuesday, a court hearing has not yet been set.

Shares:

Leave a Reply

Your email address will not be published. Required fields are marked *