A recent court filing has brought to light a significant data breach incident involving a major service provider in the debt relief sector. The complaint, filed by Myra Burgess on November 18, 2024, in the United States District Court for the Northern District of Illinois, accuses Set Forth, Inc. of failing to adequately protect sensitive personal information belonging to its clients' customers. This class action lawsuit highlights serious allegations regarding data security lapses that have potentially exposed millions to identity theft and fraud.
The lawsuit details how Set Forth, Inc., which provides online account administration services for consumers enrolled in debt relief programs, allegedly failed to secure personally identifiable information (PII) such as names, addresses, and Social Security numbers. According to the complaint, this data was unlawfully accessed during a cyberattack on May 21, 2024. Despite the company's assurances of using federal law-compliant security measures to protect personal information, it appears these measures were insufficient against cybercriminals who exfiltrated the data for malicious purposes.
Plaintiff Myra Burgess claims that approximately 1.5 million individuals have been affected by this breach, suffering from privacy invasion and increased risks of identity theft. The complaint argues that Set Forth's negligence in implementing reasonable cybersecurity protocols directly led to this breach. It also criticizes the company for not providing timely or adequate notification about the breach's specifics or its potential impacts on those affected.
Burgess is seeking various forms of relief through this lawsuit. She demands injunctive and equitable relief to ensure future protection of her and other class members' PII. Additionally, she seeks compensation for damages including loss of privacy, time spent mitigating potential identity theft consequences, and diminished value of their PII due to its unauthorized exposure.
Representing Burgess are attorneys whose identities remain unspecified in the document provided. The case is presided over by judges from the Northern District of Illinois under Case ID: 1:24-cv-11857.