Brookfield Zoo Data Breach: Class Action Lawsuit Filed by Employees

Case Overview: A class action lawsuit has been filed against The Chicago Zoological Society, alleging negligence in data security practices led to a data breach that exposed employee information.

Consumers Affected: Brookfield Zoo employees whose personal information was compromised in the data breach.

Court: Circuit Court of Cook County, Illinois County Department, Chancery Division

A former employee of Brookfield Zoo has filed a class action lawsuit against the Chicago Zoological Society, the organization that operates the zoo, alleging it failed to protect the personal information of its staff in a significant data breach. 

Plaintiff Nicole Kenny filed the class action complaint against The Chicago Zoological Society on July 26 in an Illinois County Court, alleging negligence in handling sensitive data and delaying notification of the breach for months.

Kenny is looking to represent thousands of current and former employees of the zoo.

Lawsuit Claims Brookfield Zoo Delayed Data Breach Notification For Months

The lawsuit alleges that the Jan. 16, 2024 breach allowed cybercriminals to access a trove of personally identifiable information (PII), including Social Security numbers, driver's license numbers, and financial account details. 

According to the lawsuit, the zoo failed to safeguard this data, leaving it vulnerable to the attack. 

It wasn’t until July 19, 2024—six months after the breach—that Brookfield Zoo began notifying affected employees, with some, like Kenny, not receiving notice until as late as July 26.

Kenny's complaint claims the zoo’s security protocols were inadequate, pointing to the lack of proper employee training and the zoo’s failure to monitor third-party contractors handling sensitive information. 

Plaintiffs Accuse Brookfield Zoo Of Negligence, Putting Employees At Risk of Identity Theft

The lawsuit alleges that these failures made Brookfield Zoo an easy target for cybercriminals.

"The exposure of one's PII to cybercriminals is a bell that cannot be unrung," Kenny states in the complaint. For many, the impact of the breach could include identity theft and financial fraud, with victims left to monitor their accounts without any warning for months, she states.

Kenny also claims that the zoo intentionally obscured the full extent of the breach in its communications, failing to disclose key details, including how many people were impacted, how the breach occurred, or why the notification process took so long.

In the Brookfield Zoo class action lawsuit, Kenny is looking to represent anyone affected by the data breach, and is seeking certification of the class action, damages, fees, costs and a jury trial. 

Meanwhile, CommScope Inc. and CommScope Holding Company have agreed to a class action settlement of $440,000 to end claims that a cyberattack in March 2023 compromised the personal information of thousands of current and former CommScope employees.

Case Details

• Lawsuit: Kenny v. The Chicago Zoological Society et al.
• Case Number: 2024CH07017
• Court: Circuit Court of Cook County, Illinois County Department, Chancery Division

Were you or someone you know affected by the Brookfield Zoo data breach? Share your thoughts and concerns in the comments below.