Illinois Collection Agency Accused of Negligence After Breach

An Illinois collection agency was hit with a proposed class action accusing it of “reckless” data security practices after a June breach that allegedly exposed the private information of hundreds of thousands of people.

RRCA Accounts Management Inc. violated industry cybersecurity standards, including multi-factor authentication, despite knowing the risks of data breaches, according to a complaint filed Tuesday in the US District Court for the Northern District of Illinois. The company faces seven counts, including negligence, implied breach of contract, and violations of the Illinois Consumer Fraud and Deceptive Business Practices Act.

RRCA provides a range of collection services, including ...