DISA Global Sued Over Data Breach Affecting 3.3 Million People

DISA Global Solutions Inc. negligently failed to protect the personal information of more than 3.3 million people that was exposed in a 2024 data breach, two proposed federal class actions said.

Christopher Duiker and Drew Webster alleged in separate lawsuits that DISA, a third-party employment screening services administrator, breached its duties under common law, contract law, industry standards, and the Federal Trade Commission Act to implement reasonable and adequate data-security practices and provide timely notice of the breach.

Information exposed in the incident included names, Social Security numbers, and government-issued ID numbers, according to complaints filed Tuesday in the US ...