A class action lawsuit has been filed against Ceva Logistics, alleging that the company failed to adequately safeguard the sensitive personal information of its employees and customers following a data security incident earlier this year
Ceva Logistics is facing a class action lawsuit alleging that it failed to properly protect the sensitive personal information of its employees and customers during a data security breach earlier this year.
On August 1, CEVA Logistics notified its customers of a data breach after hackers gained unauthorized access to the company’s systems on July 29. The cyberattack disrupted operations at eight CEVA warehouses across Europe, impacting contract-logistics activities and resulting in delays to shipments and order fulfillment.
The incident resulted in the theft of personal information belonging to customers of companies that rely on CEVA Logistics for warehousing and fulfillment services. The potentially compromised data included names, postal addresses, phone numbers, email addresses, and order details. Organisations affected by the breach include Dutch retailer Bol, De Bijenkorf, Ace & Tate, ING, Ajax, and Valve’s Steam hardware business.
The incident is currently under investigation by the Dutch Data Protection Authority, along with other law enforcement agencies and the businesses affected by the breach.
According to FreightWaves, a former CEVA employee, Kevin Krupa has filed a class action lawsuit against the company in the US District Court for the Southern District of Texas in Houston, where CEVA’s US headquarters is located. The lawsuit alleges that CEVA failed to properly protect sensitive personal information stolen during the cyberattack that disrupted its European operations.
“Cybercriminals were able to breach Defendant’s systems because Defendant failed to adequately train its employees on cybersecurity and failed to maintain reasonable security safeguards or protocols to protect the Class’s private information . . . rendering [employees] easy targets,” Krupa said in the lawsuit.
Krupa added that he faced fraudulent charges on his credit card, which forced him to cancel it, and also received more spam and scam calls after the breach.
The lawsuit claims that Ceva Logistics did not properly inform employees about the data breach, leaving them at greater risk of fraud and identity theft. The complaint seeks class action status, alleging that at least 100 employees were affected, with the number potentially reaching thousands. It seeks at least US$5 million in damages, accusing Ceva of negligence, breach of implied contract, and unjust enrichment.
