Breach, Compliance Management, Data Security, Privacy

Lawsuit dismissed in Georgia after state admits to massive breach

Plaintiffs in Atlanta had a class-action lawsuit dismissed on Monday following the state's acknowledgement it had put at risk the data of six million voters, according to the Atlanta Journal-Constitution.

The suit alleged the Georgia Secretary of State's Office was responsible for the exposure, which occurred on Oct. 13 but wasn't disclosed until Nov. 18. Twelve discs containing PII was sent to 12 organizations subscribed to “voter lists” maintained by the state.

“The lawsuit has done exactly what we wanted it to do,” Jennifer Jordan, attorney for the plaintiffs, told the AJC. “We just want to make sure this doesn't happen again.”

Those affected are being offered a year of free credit and identity theft monitoring services, costing the state $1.2 million.

The employee blamed in the incident was fired, but the AJC alleged that the incident reflected "a business culture that ignored written policies for the sake of expediency."

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.