Kentucky Internet Provider, Billing Vendor Sued Over Data Breach

Kentucky-based internet service provider Duo Broadband and its billing-services vendor Communications Data Group Inc. negligently failed to protect thousands of customers’ personal information before it was leaked in a February data breach, a proposed federal class action said.

Lead plaintiff Patty Bennett alleged that Duo Broadband and CDG breached their duties under common law, contract law, industry standards, and the Federal Trade Commission Act to implement reasonable and adequate data-security measures. The companies are also accused of failing to give timely notice of the incident.

Information exposed in the breach included names, addresses, dates of birth, and Social Security numbers, ...