Sears Is Sued for Data Breach

After news reports documented how Sears' ManageMyHome.com site exposed customer purchase data to the public (e.g., any web-site visitor who requested it), a New Jersey resident has filed a $5 million class action lawsuit against the retailer. According to the InformationWeek article:

"In a complaint filed on Friday in Cook County, Ill., where Sears has its headquarters, plaintiff Christine Desantis alleges that the company's exposure of customer data represents a breach of contract and a violation of the Consumer Fraud Act. The $5 million sought is to cover payments to affected consumers and attorneys, and the cost of injunctive relief; no individual is seeking more than $75,000, according to the legal filing."

The lawsuit argues that Sears failed to take reasonable steps to protect consumers' private data.