Subscribe

Ashley Madison sued over data breach

By Reuters
US, 25 Aug 2015

Infidelity Web site Ashley Madison and its parent company Avid Life Media have been sued in federal court in California by a man who claims the companies failed to adequately protect clients' personal and financial information from theft, saying he suffered emotional distress.

The lawsuit, filed in US District Court in Los Angeles by a man identified as John Doe, seeks class-action status.

The lawsuit accuses Ashley Madison and Avid Life Media, which is based in Toronto, of negligence and invasion of privacy, as well as causing emotional distress. The lawsuit seeks unspecified damages.

The legal action follows a breach of the Ashley Madison Web site by a group of cyber criminals called the Impact Team, which downloaded "highly sensitive personal, financial, and identifying information of the Web site's some 37 million users," the lawsuit said.

The hacker group threatened to release information if the site was not shut down, and in August, when the site had not been shut down, published "stolen personal information," the suit said.

The data, which was dumped online, included millions of e-mail addresses for US government officials, UK civil servants and high-level executives at European and North American corporations.

The lawsuit claims the data breach could have been prevented if the company had taken "necessary and reasonable precautions to protect its users' information, by, for example, encrypting the data".

The lawsuit says in addition to making "extremely personal and embarrassing information ... accessible to the public," the data breach made personal details such as addresses, phone numbers and credit card information available on the Web.

Avid Life Media could not be reached immediately for a comment outside regular business hours.

The company was sued in Canada last week in a class-action suit that seeks $760 million in damages.

Share