Morley Companies Inc. agreed to pay $4.3 million to settle a class action arising from an August 2021 ransomware attack and data breach that exposed the personal information of nearly 700,000 people.
Plaintiff Christine Thomsen alleged her personal information and that of the class members was stolen due to Morley’s inadequate cyber security. Her lawsuit was consolidated with other similar lawsuits bringing claims of negligence, breach of contract, and unjust enrichment.
Judge Thomas L. Ludington of the US District Court for the Eastern District of Michigan gave preliminary approval to the settlement in an Oct. 4 order. The company denied ...