By David Thomas and Mike Scarcella
Aug 13 (Reuters) - U.S. law firm Kelley Drye & Warren is facing a new lawsuit over a data breach that allegedly exposed personal information of thousands of its current and former clients, employees and others.
The proposed class action filed on Tuesday in New York state court said Kelley Drye suffered a cyber attack in March that exposed names, dates of birth, Social Security numbers and driver’s license numbers which the firm possessed.
The lawsuit was filed by a former employee of one of the firm's clients, who was not identified. The plaintiff, Ratna Kanhai, said she received a notice in July of the data breach.
Firm leaders at Kelley Drye did not immediately respond to a request for comment, nor did attorneys for Kanhai.
Kelley Drye, with about 300 lawyers, is the latest law firm to face class action claims over an alleged breach as cyberattacks have plagued the legal industry.
Last year, Orrick, Herrington & Sutcliffe agreed to pay $8 million to settle a lawsuit over a breach that allegedly compromised the personal data of more than 600,000 people.
Florida-based Gunster in November said it would pay $8.5 million to resolve a proposed class action over a 2022 data breach.
Kanhai alleged that in the aftermath of the Kelley Drye breach, she "experienced a dramatic increase in scam and phishing texts and calls."
The lawsuit said Kelley Drye has stated that it recovered data stolen in the breach and that the firm has a "high degree of confidence that the data will never be posted, disclosed, or used."
Kanhai said Kelley Drye's data breach notice was "intentionally misleading, and intentionally downplays the severity of the Data Breach and the threat it poses to thousands of individuals."
The lawsuit seeks class action status for thousands of individuals and unspecified monetary damages.
The case is Ratna Kanhai v. Kelley Drye & Warren, New York County Supreme Court, unassigned.
For plaintiff: Linda Joseph of Schroder, Joseph & Associates; and Raina Borrelli of Strauss Borrelli
For defendant: No appearance yet
Read more:
Law firm Thompson Coburn and healthcare client hit with data breach lawsuit
Another US law firm reaches data breach settlement as cyber risks mount
Law firm Kirkland sued in class action over MOVEit data breach
Law firm Orrick agrees to $8 mln settlement over breach of client data