Rumpke settles lawsuit over employee data stolen in cyberattack

Rumpke has agreed to settle a class-action lawsuit stemming from a cyberattack in October 2024 that resulted in the theft of over 3 terabytes of employee data, including social security numbers and other personally identifying information. The settlement, totaling $750,000, will be distributed to nearly 17,000 current and former employees affected by the breach. Rumpke maintains it has no evidence that the stolen information was misused, but is taking precautionary measures to protect its employees.

The lawsuit alleged that Rumpke failed to implement adequate cybersecurity measures and was slow to detect the ransomware attack. Eligible employees can receive reimbursement for losses up to $5,000, a cash payment of up to $475, and one year of identity theft and credit monitoring services.

The settlement is pending final approval by the Hamilton County Common Pleas Court on April 16th. This incident is part of a growing trend of cyberattacks targeting organizations like local governments and healthcare providers, with the FBI reporting a record $16.6 billion stolen from Americans in 2024.

(Source：Cincinnati Cincinnati Enquirer)