San Dieguito High School data breach $1.75M class action settlement - Top Class Actions

San Dieguito High School data breach $1.75M class action settlement
FOLLOW ARTICLE
010
By Top Class Actions
September 16, 2022
Aerial view of American football field at San Dieguito High School Academy, California, USA - Aeries Software, data breach
(Photo Credit: Unwind/Shutterstock)
Aeries Software agreed to a $1.75 million settlement to resolve claims a 2019 data breach compromised personal information of San Dieguito Union High School students.

The settlement benefits individuals who had an Aeries account through the San Dieguito Union High School District during the Aeries Software data breach around Nov. 4, 2019.

Aeries Software offers systems and services for K-12 districts and schools that allow parents and students to access important information.

In November 2019, Aeries announced it was the victim of a data breach that compromised the information of parents and students at many K-12 school districts in California — including the San Dieguito Union High School District in San Diego County. The breach reportedly compromised sensitive information such as login information, physical addresses, email addresses and more.

Parents quickly took legal action on behalf of their children, arguing Aeries failed to protect their information from the data breach. According to the plaintiffs, Aeries could have prevented the breach by implementing reasonable cybersecurity measures. However, the company negligently failed to do so and, as a result, allowed the breach to occur, the class action lawsuit contends.


The data breach class action lawsuit also challenges the timeline in which Aeries notified affected schools, parents and students.

Despite learning of the breach as early as November 2019, Aeries Software allegedly waited until April 2020 to inform affected individuals. According to the parents, these months could have been used to safeguard sensitive information compromised in the breach.

Aeries Software hasn’t admitted any wrongdoing but agreed to a $1.75 million class action settlement to resolve these allegations.

Under the terms of the settlement, class members can receive a cash payment based on unreimbursed losses they suffered as a result of the data breach.

Class members can receive up to $1,000 for ordinary out-of-pocket losses such as credit monitoring and up to 40 hours of lost time at a rate of $25 per hour.


Class members can also receive up to $10,000 for extraordinary out-of-pocket expenses resulting from financial fraud or identity theft.

If any funds remain in the settlement fund after payments are disbursed, class members may receive an additional payment. If funds remain once more after this distribution, remaining money will be donated to the Georgetown Law Center on Privacy & Technology.

All class members are able to receive one free year of credit-monitoring services from the settlement, even if they did not experience out of pocket losses.

The deadline for exclusion and objection is Oct. 10, 2022.

The final approval hearing is scheduled for Nov. 10, 2022.