Marsh Faces Revived Data Breach Suit After Loss on Standing

Marsh & McLennan Cos. Inc. must face allegations it failed to protect the personal information of more than 7,000 employees, clients, and contractors that was exposed in an April 2021 data breach, after a federal appeals court overturned a lower court’s dismissal of a proposed class action.

The risk of identity theft after a targeted breach that disclosed a victim’s name and Social Security number constitutes a concrete injury sufficient to establish Article III standing under US Supreme Court and Second Circuit precedent, Judge Beth Robinson of the US Court of Appeals for the Second Circuit said Thursday.

The district ...