A class action lawsuit has been filed against a prominent cloud-based customer relationship management company, accusing it of failing to protect sensitive customer data. The complaint was lodged by Renne Baca in the United States District Court for the Northern District of Illinois on December 5, 2024, targeting Set Forth, Inc. The case highlights significant concerns over data security practices and their consequences.
Renne Baca, representing himself and others similarly affected, claims that Set Forth, Inc., a Delaware corporation headquartered in Schaumburg, Illinois, neglected its duty to safeguard personal identifiable information (PII) of its clients' customers. This alleged negligence led to a massive data breach on May 21, 2024, compromising the PII of approximately 1.5 million individuals. The compromised data reportedly includes names, Social Security numbers, dates of birth, and addresses. Baca argues that this breach has inflicted "concrete injuries" on him and other class members due to the exposure of their private information to cybercriminals.
The lawsuit accuses Set Forth of several legal violations including negligence, unjust enrichment, invasion of privacy, breach of fiduciary duty, and violations under the Illinois Consumer Fraud and Deceptive Business Practices Act. According to the complaint, Set Forth failed to adhere to industry standards and Federal Trade Commission guidelines for data protection. Furthermore, the company allegedly delayed notifying affected individuals about the breach until November 8, 2024—171 days after it occurred—hindering victims' ability to mitigate potential harm.
Baca is seeking various forms of relief from the court including compensatory damages for those affected by the breach as well as injunctive relief requiring Set Forth to implement adequate security measures moving forward. Additionally, he demands restitution for damages suffered due to identity theft risks and seeks attorney fees along with other legal costs associated with pursuing this case.
The case is being handled by attorneys Gary M. Klinger from Milberg Coleman Bryson Phillips Grossman PLLC in Chicago and Kelly Hyman from The Hyman Law Firm in West Palm Beach. It is presided over by judges at the United States District Court for the Northern District of Illinois under Case No. 1:24-cv-12497.