In a recent class action lawsuit, Joel Bellefeuille Jr. has filed a complaint against Set Forth, Inc., accusing the company of failing to protect sensitive personal information, leading to a massive data breach. The lawsuit was filed on November 26, 2024, in the United States District Court for the Northern District of Illinois. Bellefeuille claims that Set Forth's negligence resulted in unauthorized access to the personal identifiable information (PII) of approximately 1.5 million consumers.
The case revolves around an incident that occurred on May 21, 2024, when Set Forth discovered an unauthorized user had accessed its systems. This breach led to the exfiltration of sensitive data including Social Security Numbers, dates of birth, and addresses. Despite discovering the breach in May, Set Forth only disclosed it publicly on November 8, 2024. Bellefeuille argues that this delay in notification further exposed affected individuals to potential fraud and identity theft.
Bellefeuille alleges that Set Forth failed to implement adequate cybersecurity measures despite being aware of the risks associated with handling sensitive consumer data. The complaint highlights that Set Forth's privacy policy promised compliance with federal security standards but failed to deliver on these assurances. As a result of this negligence, Bellefeuille claims he experienced attempted fraud and continues to face ongoing risks due to his compromised PII.
The lawsuit seeks compensatory damages for those affected by the breach as well as injunctive relief to prevent future incidents. It emphasizes the need for improved security measures and timely notifications in case of breaches. The plaintiff is represented by attorneys whose names are not specified in the document.
This case is presided over by unnamed judges under Case ID: 1:24-cv-12188.