New York Life Hit With Suit Over Data Breach Against Vendor

New York Life Insurance Co. negligently failed to protect the personal information of thousands of current and former policyholders that was exposed in an October 2023 ransomware attack and data breach against one of its vendors, a proposed federal class action said.

David Owens alleged that New York Life breached its duties under common law, contract law, industry standards, and the Federal Trade Commission Act to implement reasonable and adequate data-security measures and carry out effective oversight over third parties to which it entrusted sensitive data. It also waited nearly a year to inform affected people, he alleged.

Information exposed ...