David’s Bridal Hit With Two Class Actions Over Data Breaches

Employees and customers of David’s Bridal Inc. hit the bridal shop with two proposed class actions Saturday over the company’s alleged failure to protect personally identifiable information after two subsequent data breaches.

The bridal and occasion store was attacked by ransomware group LockBit 3.0 in January 2024, according to both complaints filed in the US District Court for the Eastern District of Pennsylvania. “Instead of remedying its deficient cybersecurity practices following LockBit’s theft of” personal information, the complaints say, David’s Bridal “did nothing” and suffered a second attack from another ransomware group, WereWolves, in February 2024.

David’s Bridal—which has 300 ...