Cassandra Nelson, Class Action Complaint
Cassandra Nelson, Class Action Complaint
18CV44864
4
IN THE CIRCUIT COURT FOR THE STATE OF OREGON
5
FOR MULTNOMAH COUNTY
6
13
vs. Not Subject to Mandatory Arbitration
17
18 1.
28 Customers affected by Burgerville’s data breach can sign up to join the class
action at www.UnderdogLawyer.com/Burgerville.
2 2.
3
FACTUAL ALLEGATIONS
4
This complaint’s allegations are based on personal knowledge as to plaintiff’s
5
6 own behavior and made upon information and belief as to the behavior of others.
7 Throughout 2017 and 2018, plaintiff used a debit card to purchase food and
8
beverages at various Burgerville locations in the Portland-metro area and later had
9
her card information compromised by Burgerville. Plaintiff files this complaint as a
10
12 by Burgerville’s failure to adequately protect their credit and debit card information.
13
Plaintiff requests Burgerville provide fair compensation in an amount that will
14
ensure every consumer affected by its data breach will not be out-of-pocket for the
15
16 costs and harm caused by identity theft and independent third-party credit repair
17
and monitoring services.
18
3.
19
20
Throughout the past year, Burgerville collected and stored credit and debit
25 knew that its failure to protect plaintiff’s card information from unauthorized access
26 would cause serious risks of credit harm and identify theft for years to come.
27
28
2 4.
3
On October 3, 2018, Burgerville announced for the first time that it had been
4
hacked by unauthorized third parties, subjecting plaintiff to credit harm and identify
5
6 theft and other economic losses. Burgerville knew it had been hacked for several
7 months, and failed to timely notify consumers of its data breach in the most
8
expeditious manner possible as Oregon law requires. In an attempt to increase
9
profits, Burgerville negligently failed to maintain adequate technological safeguards
10
12 targeted plaintiff’s information for the sole purpose of using the information to
13
commit fraud. Burgerville knew and should have known that failure to maintain
14
adequate technological safeguards would eventually result in a massive data breach.
15
16 Burgerville could have and should have substantially increased the amount of money
17
it spent to protect against cyber-attacks but chose not to. Plaintiff and other
18
consumers should not have to bear the expense caused by Burgerville’s negligent
19
20
failure to safeguard their credit and debit card information from cyber-attackers.
21 5.
22
As a direct result of Burgerville’s negligence as alleged in this complaint,
23
plaintiff suffered economic losses including the actual loss of card information to
24
25 hackers seeking to use the information for fraudulent illegal purposes. The economic
26 losses Burgerville caused consumers across the state of Oregon could have been
27
mitigated had Burgerville notified them that their information was compromised in
28
the most expeditious manner possible as Oregon law requires.
2 6.
3
CAUSE OF ACTION
4
Negligence
5
7 card information belonging to plaintiff and the putative class members, then
8
breached its legal duty by failing to maintain adequate technological safeguards,
9
falling below the standard of care in the technological industry, directly and
10
11 proximately causing foreseeable risk of data loss and credit harm and identity theft
12 and other economic losses, in amounts to be decided by the jury. Burgerville’s failure
13
to comply with laws requiring it to notify consumers of its data breach in the most
14
expeditious manner possible constituted negligence per se. Plaintiff and the class
15
16 are entitled to equitable relief in the form of an accounting of exactly how their credit
17
and debit card information was accessed without authorization by third parties, and
18
unless agreed upon by Burgerville, an order to preserve all documents and
19
20
information (and electronically stored information) pertaining to this case.
21
22
23
24
25
26
27
28
2 7.
3
PRAYER FOR RELIEF
4
A. Injunctive and equitable relief as described in the paragraph 6,
5
10
14 October 3, 2018
15
RESPECTFULLY FILED,
16
/s/ Michael Fuller
17
Michael Fuller, OSB No. 09357
18 Lead Trial Attorney for Plaintiff
OlsenDaines
19 US Bancorp Tower
20
111 SW 5th Ave., Suite 3150
Portland, Oregon 97204
21 [email protected]
Direct 503-743-7000
22
23
Justin Baxter, OSB No. 992178 Kelly Jones, OSB No. 992178
24 Of Attorneys for Plaintiff Of Attorneys for Plaintiff
25 Baxter & Baxter LLP The Law Office of Kelly Jones
[email protected] [email protected]
26
27
28