Dollar Bank FSB finds itself entangled in a gripping legal saga as proposed lead plaintiff Anna Stewart-Gower initiates a class-action lawsuit in the Pennsylvania state court. The suit contends that Dollar Bank neglected its duty to safeguard sensitive information inherited during the 2021 merger with Standard AVB Financial Corp. What makes this legal drama truly captivating is the allegation that the bank waited over twenty-two months to disclose the breach, leaving thousands of customers in the dark.

Intermittent Access and a Shocking Revelation

Stewart-Gower, the driving force behind the proposed class action, accuses Dollar Bank of breaching its privacy policy and online statements. According to the lawsuit, an unidentified entity gained "intermittent access" to Standard Bank's former systems and customers' personal identifiable information from March 2021 to February 2023. The revelation that the breach went undetected until February 4, 2023, adds a layer of perplexity to the narrative. Dollar Bank allegedly delayed notifying the affected class until May 31, 2023, depriving them of the chance to mitigate potential injuries promptly.

Class Action Seeks Justice for 13,000 Customers

Stewart-Gower seeks to represent a class exceeding 13,000 customers nationally, all of whom fell victim to the cyberattack that compromised their data. The lawsuit lists Dollar Bank as the defendant, citing negligence, breaches of implied contract, fiduciary duty, and confidence, unjust enrichment, and publicity given to private life as the grounds for legal action.

Dollar Bank Hit Suit Over Merged Banks Data Breach : A Twist in Venue and Claims of Identity Theft

Originally filed in federal court in November and voluntarily dropped on January 5, the suit was refiled in state court on Wednesday. The complaint asserts that Dollar Bank, operating in Pennsylvania, Ohio, Virginia, and Maryland, acquired Standard Bank in early 2021, absorbing its $1.1 billion in assets. Unauthorized access to Standard Bank's former computer systems by hackers allegedly began around March, compromising sensitive customer information.

Stewart-Gower shares her personal ordeal, revealing she had encountered unauthorized access to her account in late 2021, resulting in identity theft and fraudulent charges on her Standard Bank cards. The aftermath of the data breach left her inundated with spam messages and phone calls.

Dark Web Dangers and Regulatory Negligence

The lawsuit claims that the victims' personal information, including Social Security numbers, driver's license numbers, military IDs, and account details, may still be available on the dark web. Dollar Bank, according to the complaint, failed to adhere to federal regulations, industry best practices, and its own promises regarding cybersecurity. The suit estimates that over 13,000 customers had their private information compromised.

Bank's Response and Legal Representation

Dollar Bank, represented by Mullen Coughlin LLC, asserts that the breach predates the merger and only affected Standard Bank computers, separate from those containing existing Dollar Bank customer data. Andrew Hasley, a Dollar Bank representative, informed Law360 that the case was already on the bank's radar due to the initial federal filing, which was dismissed for "jurisdictional reasons."

The unfolding legal battle has undoubtedly set the stage for a contentious confrontation between Dollar Bank and the proposed class, represented by Samuel J. Strauss and Raina Borrelli of Turke & Strauss LLP, and Patrick Howard of Saltz Mongeluzzi & Bendesky PC.