Employee data security lawsuit case hits major U.S. mushroom producer

In August 2025 Monterey Mushrooms experienced a ransomware attack attributed to the INC RANSOM group that exposed employee personal information (Social Security numbers, driver’s license and passport data) and was later posted on the group’s leak site; employees filed multiple class actions consolidated in federal court alleging negligence, lack of basic safeguards (encryption, segmentation, MFA), and excessive notification delay, while the report reviews relevant case law, FTC/NIST guidance, and practical security controls for CISOs.