In a high-stakes legal battle, a former employee of the popular Southern-style fast-food chain Bojangles’ Restaurants Inc. has filed a lawsuit against the company after a major data breach exposed sensitive personal information. Jessie Ruiz-Jacobs, who worked at Bojangles, accuses the company of failing to safeguard the private details of thousands of customers and employees during a cyberattack that spanned from February 19 to March 12 of this year.

Bojangles Data Breach : Data Exposed in Weeks-Long Cyberattack

Ruiz-Jacobs’ lawsuit, filed in North Carolina federal court on Monday, claims that the breach compromised crucial personal information, including Social Security numbers, medical data, and credit card details. He seeks to represent a nationwide class of individuals whose data was stolen, arguing that Bojangles’ negligence has put their financial and personal security at risk for decades.

"Cyber criminals now possess everything needed to commit identity theft and wreak havoc on the financial and personal lives of thousands of people," the lawsuit states. It goes on to accuse Bojangles of recklessly neglecting to implement required cybersecurity measures, leading to the breach.

Impact of the Data Breach: Fraud and Ongoing Risks

The lawsuit claims that Ruiz-Jacobs personally suffered a fraud loss of $80 on his debit card, an incident he attributes directly to the exposed information. He argues that had he known about Bojangles’ inadequate security practices, he would never have shared his personal data with the company. Now, he and other affected individuals face the constant threat of fraud and identity theft due to their compromised information.

The lawsuit underscores the lifelong vigilance required from those impacted by the breach, stating that they must remain wary of potential financial and identity risks. Ruiz-Jacobs and his proposed class members are already incurring costs and spending time trying to mitigate the damage from the breach.

Allegations of Negligence and Reckless Behavior

The lawsuit accuses Bojangles of several serious claims, including negligence, breach of implied contract, breach of fiduciary duty, and unjust enrichment. Ruiz-Jacobs argues that the company’s failure to protect personal data goes beyond mere negligence, describing it as "grossly negligent" and "reckless."

As part of the lawsuit, Ruiz-Jacobs is demanding damages, including both pre- and post-judgment interest. He is also seeking injunctive relief, which would require Bojangles to implement stronger data security measures, including better training for its security staff, purging unnecessary data, and overhauling its data storage practices to prevent future breaches.

Bojangles Faces Growing Scrutiny Over Security Practices

While representatives for Bojangles and its legal team have yet to comment on the lawsuit, the company now faces mounting pressure to address its cybersecurity shortcomings. The outcome of this case could have far-reaching implications not only for Bojangles but also for businesses across the fast-food and retail sectors, which are increasingly under fire for their handling of personal data.

Ruiz-Jacobs is represented by Scott C. Harris, David K. Lietz, and Gary M. Klinger of Milberg Coleman Bryson Phillips Grossman PLLC. Bojangles' legal counsel has not yet responded to requests for comment.