McMenamins, Inc. Data Breach Prompts Investigation into Class Action Lawsuit

Console & Associates, P.C. Investigates Possible Class Action Lawsuit Against McMenamins, Inc. Following Recent Data Breach Affecting 20,504 Consumers

MARLTON, N.J. - Jan. 31, 2022 - PRLog -- The law firm of Console & Associates, P.C. announced that it will be investigating the McMenamins, Inc. data breach to determine what legal remedies, if any, will be available to consumers affected by the breach.

A data breach occurs when an unauthorized party gains access to the consumer data in a company's computer networks. These security incidents often result from a person hacking into a company's network.

While a data breach doesn't necessarily mean that the information obtained will be used for criminal purposes, one of the most common reasons hackers conduct cyberattacks is to obtain information that can be used to commit identity theft.

Whether the data accessed through a breach is retained by the party orchestrating the cyberattack or sold to another party, there is no way to be sure what the party in possession of the information plans to do with it. Affected consumers are at an increased risk of experiencing identity theft or other financial losses.

The investigation into the breach is ongoing, but this cybersecurity incident raises concerns about the company's efforts to safely store and maintain sensitive consumer data. If it turns out that McMenamins, Inc. has in some way failed to protect consumer data, affected parties may be eligible for financial compensation through a data breach class action lawsuit.

Attorney Richard Console explains, "It's easy to place all the blame for a data breach on the person who hacks into an organization's system; however, this ignores the legal and moral obligation that these companies owe to customers. When someone gives a company their business, they trust that the information in the organization's possession will remain private—and out of the hands of criminals. While protecting consumer data requires a business to undergo some effort and expense, in our current environment of widespread hacking, this is a cost of doing business that all organizations must take seriously."

According to McMenamins, Inc.'s data privacy incident notice, the company reported that it had experienced a data security event on December 12, 2021. However, many details about the breach are not yet known, including how the hacker may be intending to use the data that was breached. Further investigation ultimately revealed that the sensitive information of approximately 20,504 former employees was compromised.

The compromised information may have included individuals':

• Names
• Addresses
• Telephone numbers
• Email addresses
• Dates of birth
• Social Security numbers
• Income amounts
• Retirement contribution amounts
• Potentially, direct-deposit bank account information
• Disability status
• HR-related medical notes
• Health insurance plan elections
• Work performance and disciplinary notes
• Race, ethnicity, and gender identifying information
• Potentially, other human resources and payroll data

1. Carefully review the entire letter;
2. Retain a copy of the data breach notification letter;
3. Enroll in any free credit monitoring or identity fraud protection service provided by the company involved in the security incident;
4. Change all passwords and security questions to online accounts;
5. Frequently review all credit card and bank account statements for any signs of fraud or unauthorized activity;
6. Monitor credit reports for any unexpected changes or signs of identity theft;
7. Contact a credit bureau to request a temporary fraud alert; and
8. Notify all banks and credit card companies of the data breach.