Class Action Lawsuit Filed Against ExecuPharm and Parexel for Data Breach
KANSAS CITY, Mo. (July 10, 2020) – Stueve Siegel Hanson has filed a class action lawsuit against pharmaceutical giants ExecuPharm, Inc. and Parexel International Corp., relating to a data breach affecting current and former employees of the companies.
The lawsuit alleges that on March 13, 2020, ExecuPharm suffered a serious data breach whereby third-party hackers gained access to troves of sensitive information maintained on ExecuPharm’s servers and demanded a ransom in exchange for not releasing the information.
The stolen information included ExecuPharm and Parexel employees’ full names, home addresses, social security numbers, taxpayer IDs, credit card numbers, banking information (including copies of personal checks for direct deposit), driver’s licenses, dates of birth, names of spouses and beneficiary information, including their social security numbers, payroll tax forms (such as W-2 and W-4 forms), and in some cases, copies of passports.
After ExecuPharm failed to meet the hackers’ demands, this information was posted to a dark web website associated with a well-known ransomware group, along with thousands of emails, financial and accounting records, user documents, and database backups.
Affected individuals are now at serious risk of harm. Their most sensitive personal and financial information is in the possession of cybercriminals seeking to profit from it and is freely available on underground websites for anyone to access. The lawsuit alleges that ExecuPharm and Parexel are responsible for the breach by failing to implement and maintain reasonable safeguards to protect their employees’ information and failing to comply with industry-standard data security practices, contrary to the promises made in their employment agreements.
If you received a notification letter informing you that your personal information was compromised in the ExecuPharm data breach, please call us at 816.714.7105 or fill out a contact us form here.
Stueve Siegel Hanson attorneys have prosecuted cases involving the largest data breaches in U.S. history, securing billions of dollars for affected consumers. The firm was named the “Cybersecurity & Privacy Group of the Year” by Law360, which recognizes practice groups that “worked on the biggest deals or achieved the biggest wins in the most important cases.” For more information about our data breach practice, click here.
