A class-action lawsuit alleges the Oklahoma Department of Securities acted negligently in a December 2018 data breach in which 300,000 people’s names, Social Security numbers and other personal information were published online, The Oklahoman reports. The lawsuit alleges the department caused the breach by misconfiguring a firewall and that it waited several weeks to notify law enforcement of the breach, leading to “valuable evidence of the extent of the harm” being “irretrievably lost.”
Full Story