Why data breach class actions are surging and how CISOs can respond

Healthcare Services Group disclosed a data breach in which attackers accessed and copied files between September 27 and October 3, 2024, affecting about 624,000 people and compromising sensitive PII (SSNs, driver’s licenses, financial account information, credentials). The report outlines multiple rapid class-action lawsuits alleging delayed notification and inadequate safeguards, details the breach timeline and scope, and concludes with a vendor (ThreatLocker) pitch for layered endpoint and exfiltration controls as a mitigation.