Furniture Retailer Data Breach Exposed Bank Accounts, Suit Says

A company operating more than a hundred Ashley Furniture HomeStores was hit with a proposed class action alleging its negligent cybersecurity practices led to a breach that exposed the personal information of “hundreds of thousands” of individuals.

The Dufresne Spencer Group LLC—which owns and operates 166 Ashley Furniture stores—failed to comply with industry standards and guidelines, such as monitoring systems for intrusions or training its employees on proper data handling practices, according to a complaintfiled Monday in the US District Court for the Southern District of Texas.

In January 2024, the company discovered that an unauthorized party accessed its ...