PurFoods LLC faced a cyberattack between January 16, 2023, and February 22, 2023, compromising the personal data of 1,249,219 individuals, including customers, employees, and independent contractors. The breach exposed sensitive information, leading to potential fraud, identity theft, and financial losses. Affected individuals could claim up to $5,000 for documented losses (e.g., unreimbursed fraud expenses, legal fees, credit monitoring costs) or a pro rata cash award (~$75) if no losses were documented. The company agreed to a $4.25 million settlement, including three years of credit monitoring and $1M identity theft insurance for victims. The lawsuit alleged PurFoods failed to implement adequate security measures, though the company denied wrongdoing. The incident highlights significant reputational and financial risks, with long-term trust erosion among customers and partners.
Source: https://www.claimdepot.com/settlements/purfoods-data-settlement
TPRM report: https://www.rankiteo.com/company/purfoods-llc
"id": "pur1785017110725",
"linkid": "purfoods-llc",
"type": "Breach",
"date": "1/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '1,249,219 individuals '
'(customers, employees, '
'independent contractors)',
'industry': 'Food Services / Distribution',
'location': 'United States',
'name': 'PurFoods LLC',
'type': 'Company'}],
'customer_advisories': {'compensation_options': ['Documented loss payment (up '
'to $5,000)',
'Cash award (pro rata, ~$75)',
'Credit monitoring + '
'identity theft insurance (3 '
'years)'],
'eligibility_criteria': ['U.S. resident',
'Received notice from '
'PurFoods (Aug/Sep 2023)',
'Affected by data incident '
'(customers, employees, '
'independent contractors)'],
'required_documentation': ['Class member ID (from '
'notice)',
'Receipts for documented '
'losses (if applicable)']},
'data_breach': {'data_exfiltration': 'Likely (alleged theft of personal data)',
'number_of_records_exposed': '1,249,219',
'personally_identifiable_information': True,
'sensitivity_of_data': 'High (personally identifiable '
'information)',
'type_of_data_compromised': ['Personal information (names, '
'addresses, SSNs, financial '
'data, etc.)']},
'date_publicly_disclosed': '2023-08-01',
'description': 'PurFoods LLC agreed to pay $4.25 million to resolve a class '
'action lawsuit alleging it failed to adequately protect the '
'personal data of its customers, employees, and independent '
'contractors, resulting in a cyberattack that occurred between '
'Jan. 16, 2023, and Feb. 22, 2023. The breach affected '
'approximately 1,249,219 individuals, with potential exposure '
'of personal information leading to identity theft and '
'financial losses. Affected individuals may qualify for '
'compensation up to $5,000 or credit monitoring services.',
'impact': {'brand_reputation_impact': 'Significant (settlement and public '
'disclosure)',
'customer_complaints': 'Class action lawsuit filed',
'data_compromised': ['Personal information (customers, employees, '
'independent contractors)'],
'financial_loss': {'individual_compensation': {'cash_award': 'Estimated '
'$75 '
'(pro '
'rata, '
'max '
'$5,000)',
'credit_monitoring': '3 '
'years '
'of '
'three-bureau '
'credit '
'monitoring '
'+ '
'$1M '
'identity '
'theft '
'insurance',
'documented_loss_payment': 'Up '
'to '
'$5,000 '
'per '
'person'},
'settlement_amount': '$4.25M',
'settlement_breakdown': {'administration_costs': '$510,000',
'attorneys_costs': 'To '
'be '
'determined',
'attorneys_fees': '$1,416,525',
'credit_monitoring_costs': 'Determined '
'by '
'number '
'of '
'claims',
'payments_to_class_members': 'Remainder '
'of '
'fund',
'service_awards': 'Up '
'to '
'$2,500 '
'each '
'(class '
'representatives)'}},
'identity_theft_risk': 'High (documented losses include fraud and '
'identity theft)',
'legal_liabilities': '$4.25M settlement'},
'investigation_status': 'Settled (class action lawsuit resolved)',
'post_incident_analysis': {'corrective_actions': {'credit_monitoring': '3 '
'years '
'for '
'claimants',
'settlement': '$4.25M '
'payout to '
'affected '
'individuals'},
'root_causes': 'Alleged failure to adequately '
'protect personal data'},
'references': [{'source': 'Class Action Settlement Notice'},
{'source': 'Kroll Settlement Administration LLC'}],
'regulatory_compliance': {'legal_actions': {'allegations': 'Failure to '
'adequately '
'protect personal '
'data',
'class_action_lawsuit': 'Settled '
'for '
'$4.25M'}},
'response': {'communication_strategy': {'claim_process': {'deadline': '2025-10-30',
'mail_in_form': True,
'online_form': True},
'notices_sent': 'August or September '
'2023 (to affected '
'individuals)',
'public_disclosure': True},
'recovery_measures': {'compensation_program': {'cash_award': True,
'credit_monitoring': True,
'documented_loss_payment': True}},
'third_party_assistance': {'settlement_administrator': 'Kroll '
'Settlement '
'Administration '
'LLC'}},
'stakeholder_advisories': {'claim_deadline': '2025-10-30',
'final_approval_hearing': '2025-11-20',
'opt_out_deadline': '2025-09-30',
'payout_date': '~30 days post-final approval '
'(pending appeals)'},
'title': 'PurFoods $4.25M Data Breach Class Action Settlement',
'type': 'Data Breach'}