GREENSBORO, N.C. (WGHP) — University of Greensboro is a defendant in a class action lawsuit related to its response to a data breach involving highly sensitive information.
On February 5, 2024, Greensboro College announced it had completed an investigation into a data breach of its computer systems. This breach occurred between August 10, 2023 and August 21, 2023.
The university said it began an investigation after “detecting potentially malicious activity associated with some of its computer systems” and “responded quickly” after becoming aware of the breach.
The sensitive data involved includes sensitive information such as social security numbers, driver’s license numbers, state identification numbers, financial account information, dates of birth, passport numbers, medical information, and health insurance information.
In March 2024, Greensboro College was named as a defendant in a class action lawsuit regarding its response to a data breach.
According to the complaint, the school first became aware of the data breach “around August 2023,” did not notify anyone affected until February 29, and said the data affected more than 52,000 students. It alleges that he suffered “injuries and verifiable losses.” violation.
The complaint also states that Greensboro College retains the compromised data, which “remains vulnerable to further hackers and theft,” and that the data breach was carried out in a manner that Greensboro College “did not properly and reasonably.” It also alleges that the incident was caused by “the failure to implement appropriate cybersecurity procedures and protocols.”
The lawsuit also states that if Greensboro College had reported the data breach when it was first discovered, victims “would have been in a better position to protect themselves” and would have been given six months to notify them of the data breach. It claims the decision to wait harmed the victims.
You can read the full text of the lawsuit here.
