NY AG James Sues Dunkin’ Donuts for Alleged Cyber Failures Affecting Nearly 20,000

Dunkin’ Donuts failed to tell nearly 20,000 customers their accounts were compromised in a 2015 cyberattack, alleged New York Attorney General Letitia James (D) in a lawsuit Thursday. Tens of thousands of dollars from customer “DD” card accounts were stolen after the company failed to take reasonable safeguards to protect the data, said James. The company didn’t notify the customers or reset their accounts to end unauthorized access, she alleged. The company didn't investigate, which would have helped “it determine which other accounts had been compromised, what customer information had been acquired, and whether customer funds had been stolen,” she said. The company didn’t comment.