Advance Auto Parts Inc. is facing four proposed class action complaints following a recent data breach that allegedly exposed the private information of over 1 million individuals. The compromised data, which includes sensitive personal details, has reportedly already appeared for sale on the dark web.

Advance Auto Parts Data Breach Suit : Details of the Lawsuits

Charles McGee, Emmanuel Chaidez, Dylan Joseph Dragone, and Don Smith filed their respective class action suits on Monday in the Eastern District of North Carolina. They claim Advance Auto Parts failed to adequately safeguard personal information, which McGee’s suit indicates "can be used to commit myriad financial crimes" now that it has been exposed. The breach occurred due to a hacking incident targeting the company’s third-party cloud database, where data on current and former employees, as well as job applicants, was stored.

Smith’s lawsuit alleges that the breach exposed the data of more than 1 million people, while Chaidez and Dragone’s complaints each state that the information of 358,000 current and former employees was leaked.

Allegations Against Advance Auto Parts

All four complaints accuse Advance Auto Parts of negligence, breach of implied contract, and unjust enrichment due to purportedly insufficient data security practices. McGee and Dragone’s suits also seek declaratory and injunctive relief on behalf of themselves and their proposed classes. Chaidez and Smith also seek similar relief but do not list it as a separate claim.

Advance Auto Parts Data Breach Suit : Proposed Class and Relief Sought

McGee, Chaidez, Dragone, and Smith aim to represent a class consisting of all individuals whose personally identifiable information was exposed by the breach, including those who received breach notifications from Advance Auto Parts. The lawsuits argue that the company has not done enough to address the proposed class members' alleged injuries.

"Defendant has only offered 24 months of inadequate identity monitoring services, despite plaintiff and class members being at risk of identity theft and fraud for the remainder of their lifetimes," state McGee and Smith’s complaints. They further criticize Advance Auto Parts for requiring proposed class members to opt in to these monitoring services instead of automatically enrolling them. Chaidez and Dragone’s complaints echo these sentiments, asserting that the offered credit monitoring is insufficient.

Demands for Compensation and Injunctive Relief

The lawsuits seek compensatory and punitive damages with interest, attorney fees, and injunctive relief compelling Advance Auto Parts to improve its data protection practices and extend credit monitoring services beyond the 24 months already offered. McGee’s suit also asks the court to mandate that Advance Auto Parts destroy the information it holds on the proposed class members unless the company can provide reasonable justification for retaining and using such information.

Advance Auto Parts Data Breach Suit : Legal Representation

McGee, Chaidez, Dragone, and Smith are represented by Scott C. Harris of Milberg Coleman Bryson Phillips Grossman PLLC. Additional representation includes:

• McGee: Gary M. Klinger of Milberg Coleman Bryson Phillips Grossman PLLC and Bryan L. Bleichner and Philip J. Krzeski of Chestnut Cambronne PA
• Chaidez: Jeff Ostrow of Kopelowitz Ostrow PA
• Dragone: Joseph M. Lyon of The Lyon Firm
• Smith: Terence R. Coates of Markovits Stock & Demarco LLC

Counsel for Advance Auto Parts was not immediately available for comment.

Conclusion

The data breach suits against Advance Auto Parts underscore the serious consequences of inadequate data security measures. As the cases proceed, they highlight the need for stringent protection of personal information and the potential legal repercussions for failing to do so.