T-Mobile Data Breach – “Malicious Attack” Against T-Mobile E-Mail Vendor

T-Mobile Customer “Notice of Data Breach” – “Malicious Attack” Against T-Mobile’s E-Mail Vendor That Allowed Unauthorized Access to Certain T-Mobile Employee E-Mail Accounts Containing Certain T-Mobile Customer and Employee Account Information

Kehoe Law Firm, P.C. is making consumers aware that on March 5, 2020, Tripwire.com reported (“T-Mobile Says Security Incident Might Have Exposed Customers’ Data“) that “[m]obile telecommunications company T-Mobile disclosed a data security incident that might have exposed the account information of some of its customers.” According to Tripwire.com:

T-Mobile’s Cybersecurity team learned of the incident when it discovered an attack against its email vendor. The team responded by shutting down the attack and launching an investigation into what happened.

This effort revealed that malicious actors had used the attack to access certain T-Mobile employees’ email accounts. At the time of compromise, those accounts had contained the account information of T-mobile customers and employees including their names and addresses, phone numbers, account numbers, and billing information, among other details.

According to T-Mobile’s “Notice of Data Breach,” as reported by Tripwire.com:

[T-Mobile’s] Cybersecurity team recently identified and shut down a malicious attack against [its] email vendor that led to unauthorized access to certain T-Mobile employee email accounts, some of which contained account information for T-Mobile customers and employees. An investigation was immediately commenced, with assistance from leading cybersecurity forensics experts, to determine what happened and what information was affected. [T-Mobile] immediately reported this matter to federal law enforcement and are actively cooperating in their investigation.

The information accessed may have included customer names and addresses, phone numbers, account numbers, rate plans and features, and billing information. [One’s] financial information (including credit card information) and Social Security number were not impacted. [Emphasis added.]

On March 4, 2020, TmoNews.com reported (“T-Mobile reveals data breach, customer account info accessed“) that “[t]he info accessed during this attack may have included customer names and addresses, phone numbers, account numbers, rate plans and features, and billing information. It appears that some customers are being told that their financial info was not accessed while others may have had their financial account info and Social Security numbers accessed[Emphasis added.]

Tripwire.com also reported that “[n]ews of this incident comes several months after T-Mobile revealed that a security incident might have exposed the personal information of some of its customers. In that incident, digital attackers gained access to some prepaid wireless account holders’ information. This data also did not include affected individuals’ financial information (such as their payment card credentials), passwords or Social Security Numbers.”

Have You Been Impacted by A Data Breach?

If so, please either contact Kehoe Law Firm, P.C. Partner Michael Yarnoff, Esq., (215) 792-6676, Ext. 804, [email protected], complete the form on the right or send an e-mail to [email protected] for a free, no-obligation case evaluation of your facts to determine whether your privacy rights have been violated and whether there is a basis for a data privacy class action.

Examples of the type of relief sought by data privacy class actions, include, but are not limited to, reimbursement of identity theft losses and of out-of-pocket costs paid by data breach victims for protective measures such as credit monitoring services, credit reports, and credit freezes; compensation for time spent responding to the breach; imposition of credit monitoring services and identity theft insurance, paid for by the defendant company; and improvements to the defendant company’s data security systems.

Data privacy class actions are brought on a contingent-fee basis; thus, plaintiffs and the class members do not pay out-of-pocket attorney’s fees or litigation costs.  Subject to court approval, attorney’s fees and litigation costs are derived from the recovery obtained for the class.

Kehoe Law Firm, P.C.

 

 

 

 

 

 

 

J.Crew Group “Notice of Data Breach” – jcrew.com Customer Accounts

J.Crew Group, Inc. “Notice of Data Breach” Discloses Security Issue Related To www.jcrew.com Customer Accounts – E-Mail Addresses and Passwords Obtained by Unauthorized Party to Log Into jcrew.com Accounts

Kehoe Law Firm, P.C. is making consumers aware that in a “Notification of Data Breach” submitted by J.Crew Group, Inc. to the California Attorney General, J.Crew Group advised “. . . about a security issue related to . . . www.jcrew.com customer account[s].”

According to the “Notification of Data Breach,” “[t]hrough routine and proactive web scanning, [J.Crew Group] recently discovered information related to [one’s] jcrew.com account. Based on [J. Crew Group’s] review, [J.Crew Group] believe[s] [one’s] email address (used as [one’s] jcrew.com username) and password were obtained by an unauthorized party and in or around April 2019 used to log into [one’s] jcrew.com account.”

Further, according to the data breach notification, “[t]he information that would have been accessible in [one’s] jcrew.com account includes the last four digits of credit card numbers [one has] stored in [one’s] account, the expiration dates, card types, and billing addresses connected to those cards, and order numbers, shipping confirmation numbers, and shipment status of those orders.” [Emphasis added.]

Fastcompany.com reported (“If you shop at J.Crew, your sensitive personal info may have been stolen“) that “[i]t’s not clear why it took the American clothing brand nearly a year to disclose the hack.”

Have You Been Impacted by A Data Breach?

If so, please either contact Kehoe Law Firm, P.C. Partner Michael Yarnoff, Esq., (215) 792-6676, Ext. 804, [email protected], complete the form on the right or send an e-mail to [email protected] for a free, no-obligation case evaluation of your facts to determine whether your privacy rights have been violated and whether there is a basis for a data privacy class action.

Examples of the type of relief sought by data privacy class actions, include, but are not limited to, reimbursement of identity theft losses and of out-of-pocket costs paid by data breach victims for protective measures such as credit monitoring services, credit reports, and credit freezes; compensation for time spent responding to the breach; imposition of credit monitoring services and identity theft insurance, paid for by the defendant company; and improvements to the defendant company’s data security systems.

Data privacy class actions are brought on a contingent-fee basis; thus, plaintiffs and the class members do not pay out-of-pocket attorney’s fees or litigation costs.  Subject to court approval, attorney’s fees and litigation costs are derived from the recovery obtained for the class.

Kehoe Law Firm, P.C.

Carnival Cruise Ship Operator Discloses Potential Data Breach

Carnival Corporation & plc Identifies Suspicious Activity On Its Network – Carnival Discloses Unsanctioned, Third-Party Access to Some Employee E-Mail Accounts Which Contained Carnival Guest Information 

Kehoe Law Firm, P.C. is making consumers aware that according to a “Notice of Potential Data Breach” submitted by Carnival Corporation & plc (“Carnival Corporation”) to the California Attorney General, Carnival Corporation, “[i]n late May 2019 . . . identified suspicious activity on [its] network.” Carnival Corporation stated that “[i]t now appears that between April 11 and July 23, 2019, an unsanctioned third party gained unauthorized access to some employee email accounts that contained personal information regarding [Carnival Corporation’s] guests.”

Carnival Corporation’s “Notice of Potential Data Breach” stated that “[t]he types of data potentially impacted varies by guest but can include: name, address, Social Security number, government identification number, such as passport number or driver’s license number, credit card and financial account information, and health-related information.” [Emphasis added.]

Have You Been Impacted by A Data Breach?

If so, please either contact Kehoe Law Firm, P.C. Partner Michael Yarnoff, Esq., (215) 792-6676, Ext. 804, [email protected], complete the form on the right or send an e-mail to [email protected] for a free, no-obligation case evaluation of your facts to determine whether your privacy rights have been violated and whether there is a basis for a data privacy class action.

Examples of the type of relief sought by data privacy class actions, include, but are not limited to, reimbursement of identity theft losses and of out-of-pocket costs paid by data breach victims for protective measures such as credit monitoring services, credit reports, and credit freezes; compensation for time spent responding to the breach; imposition of credit monitoring services and identity theft insurance, paid for by the defendant company; and improvements to the defendant company’s data security systems.

Data privacy class actions are brought on a contingent-fee basis; thus, plaintiffs and the class members do not pay out-of-pocket attorney’s fees or litigation costs.  Subject to court approval, attorney’s fees and litigation costs are derived from the recovery obtained for the class.

Kehoe Law Firm, P.C.

 

TCPA Actions – American Residential Services; Direct Recovery Services

Kehoe Law Firm, P.C. is making consumers aware of the following Telephone Consumer Protection Act (“TCPA”) class action lawsuit filings:
American Residential Services LLC

Class action lawsuit filed on March 2, 2020 in United States District Court for the Northern District of Georgia against American Residential Services LLC “to stop Defendant from violating the Telephone Consumer Protection Act by making unsolicited, pre-recorded calls to consumers, including consumers on the National Do Not Call Registry.”

According to the complaint, American Residential Services “runs a network of company-owned locations throughout the U.S. that provide heating, air conditioning, plumbing and sewer drain services to residential consumers and businesses.[]” American Residential Services, allegedly, “places pre-recorded calls in which it identifies itself as [American Residential Services] and/or Rescue Rooter.”  The complaint alleges that the pre-recorded sales calls are made to consumers for marketing purposes and without prior express written consent.  The Plaintiff, allegedly, received calls on her cellular telephone from American Residential Services, (770) 908-8488.

Direct Recovery Services LLC

Class action lawsuit filed on March 3, 2020 in United States District Court, Central District of California, against Direct Recovery Services LLC and other defendants, as of yet unknown, for, allegedly, “negligently contacting Plaintiff on Plaintiff’s cellular telephone, in violation of the Telephone Consumer Protection Act . . . thereby invading Plaintiff’s privacy.”

According to the class action complaint, Direct Recovery Services “began to use Plaintiff’s cellular telephone for the purpose of sending Plaintiff spam text messages regarding debt collections using . . . number 381-06.”

An example from the complaint of a text message the Plaintiff received from Direct Recovery Services is as follows:

Important Private Matter. MELISSA MEYER, call 678-261-8872 or http://www.directrecoveryservices.com/view-online.html, Use: 112723993 Respond stop to unsubscribe

The Plaintiff, allegedly, told the Defendant to stop sending text messages, but the Plaintiff continued to receive “unwanted text messages.”

Do You Believe You Are a Victim of Illegal Robocalls, Text Messages, “Junk” Faxes or Telemarketing Sales Calls?

If you have received illegal robocalls, text messages, “junk” faxes or telemarketing sales calls, you may be able to recover at least $500 for each illegal call, text or fax you received and, possibly, as much as $1,500 for each illegal call, text message or facsimile that was made either willfully or knowingly in violation of the Telephone Consumer Protection Act.

To help evaluate your potential legal claims under the Telephone Consumer Protection Act, please complete KLF’s confidential Robocall Questionnaire or, if you prefer to speak with an attorney, please complete the form above on the right, e-mail [email protected] or contact Michael Yarnoff, Esq., [email protected], (215) 792-6676, Ext. 804, for a free, no-obligation evaluation of your potential legal rights.

Kehoe Law Firm, P.C.

TCPA “Junk Fax” Action – B2B Industrial Products

Kehoe Law Firm, P.C. is making consumers aware of the following Telephone Consumer Protection Act (“TCPA”) class action lawsuit filing:
B2B Industrial Products LLC

Class action lawsuit filed on March 3, 2020 in United States District Court, Northern District of Ohio, Akron Division, against B2B Industrial Products LLC “to stop [B2B Industrial Products’] practice of sending unauthorized and unwanted fax advertisements.”

According to the complaint, “[i]n an attempt to generate sales leads, and ultimately increase its revenues, B2B Industrial created a fax-based marketing campaign wherein it sent numerous unsolicited faxes advertising its products and services across the country.”  The complaint alleges that “B2B Industrial sent the fax advertisements at issue to Plaintiff and members of the Classes . . . despite: (i) having no previous relationship with them; and (ii) never receiving the recipients’ consent to receive such faxes.”

The fax messages, according to the complaint, were sent to Plaintiff from (800) 413-2463.  Copies of fax messages allegedly received by the Plaintiff, attached as exhibits to the class action complaint and reflecting (800) 413-2463, are as follows:

Do You Believe You Are a Victim of Illegal Robocalls, Text Messages, “Junk” Faxes or Telemarketing Sales Calls?

If you have received illegal robocalls, text messages, “junk” faxes or telemarketing sales calls, you may be able to recover at least $500 for each illegal call, text or fax you received and, possibly, as much as $1,500 for each illegal call, text message or facsimile that was made either willfully or knowingly in violation of the Telephone Consumer Protection Act.

To help evaluate your potential legal claims under the Telephone Consumer Protection Act, please complete KLF’s confidential Robocall Questionnaire or, if you prefer to speak with an attorney, please complete the form above on the right, e-mail [email protected] or contact Michael Yarnoff, Esq., [email protected], (215) 792-6676, Ext. 804, for a free, no-obligation evaluation of your potential legal rights.

Kehoe Law Firm, P.C.

 

TCPA – SetSchedule, Regency Capital Consulting d/b/a Merchant Bank

Kehoe Law Firm, P.C. is making consumers aware of the following Telephone Consumer Protection Act (“TCPA”) class action lawsuit filings:
SetSchedule Inc.

Class action lawsuit filed on March 2, 2020 in United States District Court for the Central District of California against SetSchedule Inc. “to stop SetSchedule from violating the Telephone Consumer Protection Act by [allegedly] placing unsolicited, autodialed phone calls to consumers.”

According to the complaint, SetSchedule is a business which “offers a paid lead generation platform to real estate agents that provides the real estate agents with consumer leads, automated marketing tools and other data services including a customer relationship management system.[]” Allegedly, “without obtaining prior express written consent,” the Defendant “places autodialed calls in order to market its lead generation platform to real estate agents.”

The complaint alleges that the Plaintiff, “a real estate agent,” received an autodialed call from SetSchedule on Plaintiff’s cellular telephone from telephone number (949) 299-032.  The Plaintiff, according to the complaint, “has never had a relationship with SetSchedule and has never provided SetSchedule express written consent to contact him.”

Regency Capital Consulting Corp. d/b/a Merchant Bank, Inc.

Class action lawsuit filed on March 2, 2020 in United States District Court, Eastern District of California, against Regency Capital Consulting Corp., d/b/a Merchant Bank, Inc., and other defendants, as of yet unknown, for, allegedly, “negligently, knowingly, and/or willfully contacting Plaintiff on Plaintiff’s cellular telephone in violation of the Telephone Consumer Protection Act . . . and related regulations, specifically the National Do-Not-Call provisions, thereby invading Plaintiff’s privacy.”

According to the complaint, Regency Capital Consulting “used an ‘automatic telephone dialing system'” “soliciting its business to Plaintiff.” Regency Capital Consulting “contacted or attempted to contact Plaintiff” from the following telephone numbers: (718) 645-6909 and (347) 221-0014.  The complaint alleges that Regency Capital Consulting “did not posess Plaintiff’s ‘prior express consent’ to receive calls using an automatic telephone dialing system or an artificial or prerecorded voice on his cellular telephone.”

Do You Believe You Are a Victim of Illegal Robocalls, Text Messages, “Junk” Faxes or Telemarketing Sales Calls?

If you have received illegal robocalls, text messages, “junk” faxes or telemarketing sales calls, you may be able to recover at least $500 for each illegal call, text or fax you received and, possibly, as much as $1,500 for each illegal call, text message or facsimile that was made either willfully or knowingly in violation of the Telephone Consumer Protection Act.

To help evaluate your potential legal claims under the Telephone Consumer Protection Act, please complete KLF’s confidential Robocall Questionnaire or, if you prefer to speak with an attorney, please complete the form above on the right, e-mail [email protected] or contact Michael Yarnoff, Esq., [email protected], (215) 792-6676, Ext. 804, for a free, no-obligation evaluation of your potential legal rights.

Kehoe Law Firm, P.C.