Delaware News

Attorney General Jennings Announces Settlement With Experian-Owned Company Over Sensitive Information Breach

Consumer Protection | Department of Justice Press Releases | Date Posted: Monday, November 7, 2022


Navy blue background featuring the Delaware state seal in the center

Attorney General Jennings today announced a multistate settlement with Experian Data Corp (“EDC”) for failing to warn affected consumers after it learned that an identity thief was posing as a private investigator and retrieving sensitive personal information from Court Ventures Inc., a database that EDC had purchased.

In 2012, the U.S. Secret Service notified EDC of the existence of the identity thief, who had begun accessing information from the Court Ventures, Inc. database before EDC purchased the company and continued to do so after the purchase. EDC failed to notify affected consumers of the identity thief’s actions.

Since that time, the individual has pleaded guilty to federal criminal charges for wire fraud, identity fraud, access device fraud, and computer fraud and abuse, among other charges.

“Today’s settlement will help protect the personal information of Delawareans moving forward,” said Attorney General Jennings. “We will continue to hold businesses like EDC accountable for their duty to protect our entrusted information from unlawful use or disclosure. Everyone who does business in Delaware needs to stay alert and protect their customer’s personal data.”

EDC has agreed to injunctive relief and a payment of $1 million to resolve this multistate investigation. Under this resolution, joined by a group of 40 states, EDC has agreed to a series of provisions designed to strengthen its security and reporting practices, including:

  • Strengthening its vetting and oversight of third parties that it allows to access personal information;
  • Investigating and reporting data security incidents to the Attorneys General;
  • Maintaining a “Red Flags” program to detect and respond to potential identity theft; and
  • Implementing certain personal information safeguards and controls, including encryption or its equivalent for personal information on their network and in transit.

Delaware, which assisted with the investigation, will receive $20,000 from the EDC settlement.

Joining Attorney General Jennings in today’s settlement are the Attorneys General of Alaska, Arizona, Arkansas, Colorado, Connecticut, District of Columbia, Florida, Hawaii, Idaho, Illinois, Indiana, Iowa, Kansas, Kentucky, Maine, Maryland, Massachusetts, Michigan, Minnesota, Missouri, Montana, Nebraska, Nevada, New Jersey, New Mexico, North Carolina, North Dakota, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Washington, and Wisconsin.

 

image_printPrint


Graphic that represents delaware news on a mobile phone

Keep up to date by receiving a daily digest email, around noon, of current news release posts from state agencies on news.delaware.gov.

Here you can subscribe to future news updates.

Attorney General Jennings Announces Settlement With Experian-Owned Company Over Sensitive Information Breach

Consumer Protection | Department of Justice Press Releases | Date Posted: Monday, November 7, 2022


Navy blue background featuring the Delaware state seal in the center

Attorney General Jennings today announced a multistate settlement with Experian Data Corp (“EDC”) for failing to warn affected consumers after it learned that an identity thief was posing as a private investigator and retrieving sensitive personal information from Court Ventures Inc., a database that EDC had purchased.

In 2012, the U.S. Secret Service notified EDC of the existence of the identity thief, who had begun accessing information from the Court Ventures, Inc. database before EDC purchased the company and continued to do so after the purchase. EDC failed to notify affected consumers of the identity thief’s actions.

Since that time, the individual has pleaded guilty to federal criminal charges for wire fraud, identity fraud, access device fraud, and computer fraud and abuse, among other charges.

“Today’s settlement will help protect the personal information of Delawareans moving forward,” said Attorney General Jennings. “We will continue to hold businesses like EDC accountable for their duty to protect our entrusted information from unlawful use or disclosure. Everyone who does business in Delaware needs to stay alert and protect their customer’s personal data.”

EDC has agreed to injunctive relief and a payment of $1 million to resolve this multistate investigation. Under this resolution, joined by a group of 40 states, EDC has agreed to a series of provisions designed to strengthen its security and reporting practices, including:

  • Strengthening its vetting and oversight of third parties that it allows to access personal information;
  • Investigating and reporting data security incidents to the Attorneys General;
  • Maintaining a “Red Flags” program to detect and respond to potential identity theft; and
  • Implementing certain personal information safeguards and controls, including encryption or its equivalent for personal information on their network and in transit.

Delaware, which assisted with the investigation, will receive $20,000 from the EDC settlement.

Joining Attorney General Jennings in today’s settlement are the Attorneys General of Alaska, Arizona, Arkansas, Colorado, Connecticut, District of Columbia, Florida, Hawaii, Idaho, Illinois, Indiana, Iowa, Kansas, Kentucky, Maine, Maryland, Massachusetts, Michigan, Minnesota, Missouri, Montana, Nebraska, Nevada, New Jersey, New Mexico, North Carolina, North Dakota, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Washington, and Wisconsin.

 

image_printPrint


Graphic that represents delaware news on a mobile phone

Keep up to date by receiving a daily digest email, around noon, of current news release posts from state agencies on news.delaware.gov.

Here you can subscribe to future news updates.