David's Bridal Faces Class Action Lawsuit Over Data Breaches Exposing Customer Information

Case Overview: A class action lawsuit has been filed against David's Bridal, alleging that the company failed to protect customer data, leading to a data breach.

Consumers Affected: Individuals whose personal information was compromised in the David's Bridal data breach.

Court: U.S. District Court for the Eastern District of Pennsylvania

David's Bridal, a well-known bridal retailer with over 300 stores across the United States and Canada, is facing a class action lawsuit alleging that the company failed to protect the personal information of its customers. 

Filed by Paula L. Oliva Mora in a Pennsylvania federal court on Wednesday, the lawsuit focuses on two data breaches that occurred in early 2024, potentially compromising the sensitive information of thousands of individuals.

Mora claims that David's Bridal breached its duty to safeguard customer data, leading to unauthorized access and exposure of personal information. The lawsuit alleges that the company failed to implement adequate security measures and did not promptly inform customers about the breaches.

Data Breaches at David's Bridal Expose Customer Information, Lawsuit Claims

The first data breach occurred around January 22, 2024, and the second breach occurred around February 14, 2024. The lawsuit claims that a wide range of personal information was compromised in these breaches, including names, Social Security numbers, dates of birth, mailing addresses, and telephone numbers.

Mora alleges that David's Bridal failed to implement reasonable security measures to protect this sensitive information, leaving it vulnerable to unauthorized access. 

“As a direct and proximate result of DB’s inadequate data security, and its breach of its duty to handle PII with reasonable care, Plaintiff’s PII has been accessed by hackers, posted on the dark web, and exposed to an untold number of unauthorized individuals," the lawsuit states.

The lawsuit also criticizes David's Bridal for its delayed disclosure of the data breaches. The company did not inform the public about the breaches until September 13, 2024, approximately eight months after the initial breach. 

This delay, the lawsuit argues, deprived customers of the opportunity to take timely action to protect themselves from potential identity theft and fraud.

Mora claims that she and other affected individuals now face an increased risk of fraud, identity theft, and other harmful consequences. She argues that this increased risk will require significant time and effort to mitigate.

David's Bridal Accused of Negligence, Delayed Breach Disclosure

The lawsuit emphasizes that companies that handle sensitive personal information have a duty to protect that information and prevent unauthorized access. It argues that David's Bridal, as a retailer and employer, knowingly obtained sensitive personal information and had a responsibility to maintain that information securely and confidentially.

It also points out the potential consequences of data breaches, including identity theft and financial fraud. Individuals whose personal information is exposed in a data breach face a greater risk of becoming victims of these crimes and may need to take significant steps to mitigate that risk.

Consumers Take Legal Action Against Companies Over Data Breaches

David's Bridal joins a growing list of companies facing lawsuits following significant data breaches. Recent examples include Wells Fargo, Varsity Brands, Slim CD, and KemperSports. These cases reflect the increasing trend of consumers taking legal action against businesses for breaches of privacy and data security.

Mora brings claims for negligence, negligence per se, breach of fiduciary duty, breach of confidences, breach of an implied contract, unjust enrichment, and declaratory judgment. She seeks actual and punitive damages, attorneys' fees, costs, and expenses, as well as injunctive and declaratory relief.

She seeks a court order requiring David's Bridal to disclose the full nature of the data breaches and the types of personal information accessed, to implement improved data security practices to prevent future breaches, and to provide lifetime identity theft protection services to all affected individuals at the company's expense.

Case Details

• Lawsuit: Paula L. Oliva Mora v. David’s Bridal, Inc.
• Case Number: 2:24-cv-05651 
• Court: U.S. District Court for the Eastern District of Pennsylvania 

Plaintiffs' Attorneys

• Liberato P. Verderame and Marc H. Edelson (Edelson Lechtzin LLP)

Have you been affected by the David's Bridal data breach? Share your experiences and concerns in the comments below.