Airport Retailer Faces $6.9M Lawsuit Settlement Following Ransomware Attack

A 2020 REvil ransomware attack against a major airport retail company resulted in the exfiltration of sensitive employee PII for roughly 76,000 people; the company allegedly waited eight months to notify victims and now faces a proposed $6.9M class-action settlement alleging failures to protect data and disclose technical details. The report frames this as part of a broader shift where ransomware incidents include data theft, increasing legal, regulatory, and financial consequences for victim organizations.