November 29, 2021

Volume XI, Number 333

Advertisement
Advertisement

Volkswagen and Audi Hit with Data Breach Class Action

This week, Volkswagen AG’s U.S. entity and its Audi brand were hit with a class action for a data breach that allegedly compromised 3.3 million consumers’ personal information. In the U.S. District Court for the District of New Jersey, a California consumer filed a suit against the automakers on behalf of other current and prospective car buyers whose information was allegedly compromised by hackers.

In June 2021, Volkswagen and Audi notified consumers of an incident in which consumer information was potentially obtained and/or accessed when one of their vendors left the data unsecured. The information potentially affected by this incident included the consumers’ names, contact information and (for some) driver’s license numbers or other similar identification number. The suit alleges that the automakers did not adequately safeguard consumer data from 2014-2019, which was gathered for purposes of sales and marketing campaigns.

The suit alleges claims of negligence, unjust enrichment, breach of confidence, breach of implied contract, as well as violations of the Driver’s Privacy Protection Act and the California Consumer Privacy Act. Plaintiff is seeking damages, reimbursement of costs for out-of-pocket expenses such as credit monitoring services, and improvements to Volkswagen’s and Audi’s data security systems.

We will monitor this suit, especially in regard to the claims under the California Consumer Privacy Act, to see what (if any) lessons can be learned or precedent set.

Copyright © 2021 Robinson & Cole LLP. All rights reserved.National Law Review, Volume XI, Number 182
Advertisement

About this Author

Kathryn Rattigan Attorney Cybersecurity Data Privacy
Associate

Kathryn Rattigan is a member of the firm's Business Litigation Group and Data Privacy + Cybersecurity Team. She advises clients on data privacy and security, cybersecurity, and compliance with related state and federal laws. Kathryn also provides legal advice regarding the use of unmanned aerial systems (UAS, or drones) and Federal Aviation Administration (FAA) regulations. She represents clients across all industries, such as insurance, health care, education, energy, and construction.

Data Privacy and Cybersecurity Compliance

Kathryn helps clients comply...

401-709-3357
Advertisement
Advertisement
Advertisement