Domino’s Franchisee in Texas Sued Following Hack of Worker Data

The franchise owner of Domino’s Pizza stores in southeast Texas was hit with a proposed class action tied to an April data breach that exposed the sensitive personal information of 39,000 employees and job seekers.

Arriana Elliott, who applied to work for MAC Pizza Management Inc. last October, alleged that the company uses “outdated” and insecure” computer software, demonstrating a “willful and conscious disregard for privacy,” according to a complaint filed Monday in the US District Court for the Southern District of Texas.

MAC Pizza, which operates 98 Domino’s stores in the region and earns $48.7 million in annual revenue, failed to adhere to Federal Trade Commission data security guidelines, she said. It also didn’t implement sufficient cybersecurity safeguards or adequately train its IT and data security employees, her suit alleged.

Elliott said the application process required her to provide her full name, Social Security number, and driver’s license number, among other personally identifiable information.

MAC Pizza keeps personal information from former applicants and employees years after their relationship with the company ends, the suit claimed.

Elliott’s information was compromised in April’s cyberattack, which the lawsuit said put her at risk of identity theft. The complaint argued that criminals can cross-reference data stolen from the breach and combine other sources to create “Fullz” packages, which can be used to commit fraud on people’s financial accounts. This not only “violates her rights to privacy,” but also leads to the “diminution in the value of her PII.”

While MAC Pizza eventually became aware of the suspicious activity in its computer systems four days into the breach, according to a company notice, the lawsuit said it didn’t inform victims including Elliott until July.

According to Elliott’s complaint, the company still hasn’t completed notifying all class members that their data has been compromised. It also allegedly hasn’t offered complimentary credit monitoring services to all victims.

Since she learned of the breach, Elliott has taken security steps including reviewing credit card and financial account statements, changing online passwords, and monitoring her credit information, the suit said. Her fears for her personal financial security have led her to experience “anxiety, sleep disruption, stress, fear, and frustration,” according to the complaint.

Elliott requested a jury trial and for victims to be awarded compensatory damages.

Kendall Law Group PLLC and Turke & Strauss LLP represent Elliott and the proposed class.

MAC Pizza didn’t immediately respond to a request for comment.

The case is Elliott v. MAC Pizza Mgm’t Inc. d/b/a Domino’s Pizza, S.D. Tex., No. 4:23-cv-02708, 7/24/23.