Thousands of Prospective Students Affected
Christian institution Lee University faces a class action lawsuit after a significant data breach compromised sensitive personal information. Filed by Michael Harris, a North Carolina resident and prospective student, the lawsuit represents thousands whose data was potentially exposed in the March 2024 cyberattack. The breach allegedly occurred through a vulnerability in third-party software.
Delayed Notification Raises Legal Concerns
Victims were notified over a year later in March 2025, prompting allegations that Lee University violated Tennessee law. The university admitted the breach involved names, Social Security numbers, and education-related information. Critics argue that this delay exacerbated the risk of identity theft and fraud.
Legal Claims Include Negligence and Privacy Violations
The class action lists four primary complaints: negligence, breach of implied contract, invasion of privacy, and unjust enrichment. Plaintiffs claim Lee failed to protect data despite knowing the risks and collecting sensitive information as part of the admissions process. They also accuse the school of reaping unjust benefits without offering compensation for damages.
Impact on Victims Described as Severe
Harris and others report significant emotional and financial distress. The complaint outlines threats, including fraudulent loan applications, stolen medical identities, and fake government benefit claims. Harris alone claims to have spent over 24 hours addressing the fallout. He reports lasting stress and loss of control over his private information.
Supporters and Critics Clash on University Response
Lee University stated it took “immediate” action after discovering the breach, launching a cybersecurity investigation, and offering credit monitoring services. Supporters say these efforts demonstrate responsibility and commitment to future security. Detractors, however, argue that the university’s actions were too late and too vague, failing to explain whether the threat had been fully contained.
Plaintiffs Seek Comprehensive Relief
The lawsuit calls for lifetime credit monitoring, damages, and court orders requiring improved data practices. Plaintiffs also request restitution and punitive damages. They demand transparency about what data was exposed and how the university plans to prevent future breaches.
Source:
Lee University sued for negligence after data breach impacts thousands
About Post Author
