Data Breach

MAPFRE Faces Lawsuit Over Alleged Privacy Violations - Damages Sought

Updated on
Published on
MAPFRE Faces Lawsuit Over Alleged Privacy Violations - Damages Sought

In the heart of Massachusetts, Brian Conway, a regular consumer, found himself entangled in a privacy nightmare that has now led to a lawsuit against MAPFRE U.S.A. Corp. and The Commerce Insurance Company. The case revolves around the alleged misuse of personal information, specifically driver's license numbers, by the insurance giant, MAPFRE.


In July 2023, MAPFRE introduced a new feature to its online sales system. This feature, seemingly designed to streamline the quoting process, auto-populated driver's license numbers once a user entered basic information. The convenience, however, came at a steep price.


"MAPFRE knowingly obtained, used, and disclosed federally protected drivers' license numbers and other motor vehicle record information through its online sales system," the lawsuit alleges. The system, as it turns out, didn't have adequate security measures in place to protect this sensitive information. The result? Unauthorized third parties found a gold mine in MAPFRE's website.


By simply entering basic information, they could access private drivers' license information for hundreds of thousands of consumers. "The auto-population feature disclosed consumers' driver's license numbers to the public without imposing security protocols," the lawsuit states.


This lack of security protocols was a direct violation of the Drivers' Privacy Protection Act (DPPA), a federal law enacted to protect the privacy of personal information assembled by State Department of Motor Vehicles (DMVs). The DPPA prohibits the disclosure of personal information without the express consent of the individual. It's clear that the alleged actions of MAPFRE not only threatened the privacy of consumers but also violated the very essence of the DPPA.


The lawsuit also accuses MAPFRE of negligence, a legal theory that requires a duty of care, a breach of that duty, and harm caused by the breach. In this case, MAPFRE had a duty to protect the personal information it collected. The alleged lack of security protocols could be seen as a breach of that duty. The harm? The potential misuse of personal information by unauthorized third parties.


Conway, along with other affected individuals, is now seeking justice. The proposed class includes individuals whose driver's license information was disclosed due to MAPFRE's sales efforts and during the data disclosure. They are seeking monetary damages and injunctive relief, including relief under the federal Declaratory Judgment Act.


"The defendants' actions threatened the privacy and safety of licensed drivers, violating the purpose of the DPPA," the lawsuit emphasizes. In the digital age, where data is the new currency, this case serves as a stark reminder of the importance of data security and the potential consequences of its neglect.

Case Facts

  • Status:
    Lawsuit Filed
  • Case Number:
    1:23-cv-12076
  • Filing Date:
    September 8, 2023
  • Jurisdiction:
    U.S. District Courts
  • State:
    Massachusetts
  • Court:
    Massachusetts District
  • Plaintiff:
    Brian Conway
  • Defendant:
    The Commerce Insurance Company; MAPFRE U.S.A. Corp
  • Plaintiff Firm:
    Pastor Law Office PC
  • Defendant Firm:
  • Claims Administrator:
Contributors
Jerome Andries, Esq.
Jerome Andries, Esq.
Reporter and Licensed Attorney
Weekly newsletter

Stay up to date with new class action settlements you may join.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Complaint

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Related class action lawsuits

Read more to get notified about updates to each case.

Patelco Credit Union Faces Lawsuit Over Alleged Data Breach
Data Breach

Patelco Credit Union Faces Lawsuit Over Alleged Data Breach

Patelco Credit Union is facing a class-action lawsuit alleging inadequate data security practices that led to a data breach, violating several consumer protection laws.
Multi-Million Dollar Lawsuit Against CLEAResult Over Data Breach
Data Breach

Multi-Million Dollar Lawsuit Against CLEAResult Over Data Breach

Lawsuit alleges CLEAResult Consulting Inc. failed to secure sensitive customer data, potentially exposing thousands to identity theft and fraud.
Lulus.com Hit with Class Action over Customer Doxing Claims
Data Breach

Lulus.com Hit with Class Action over Customer Doxing Claims

Lawsuit alleges Lulus.com violated privacy laws, doxed users, and enabled third-party eavesdropping. These are all allegations at this stage.
Cornwell Quality Tools Faces Class Action Lawsuit Over Data Breach
Data Breach

Cornwell Quality Tools Faces Class Action Lawsuit Over Data Breach

Alleged data breach at Cornwell Quality Tools leads to class-action lawsuit. Plaintiff claims negligence, breach of duty, and violation of legal obligations.
Nice Pak Products Faces Class Action Over Data Breach
Data Breach

Nice Pak Products Faces Class Action Over Data Breach

Lawsuit alleges Nice Pak Products, Inc. failed to protect employees' personal information, leading to a data breach. Damages sought for negligence, violation of FTC Act.
Peoples Bank Faces Lawsuit Over Data Breach, Customers Seek Damages
Data Breach

Peoples Bank Faces Lawsuit Over Data Breach, Customers Seek Damages

Lawsuit alleges Peoples Bank's negligence led to a data breach, compromising sensitive personal information of approximately 47,590 customers.
Caesars Entertainment Faces Multi-Million Dollar Lawsuit Over Data Breach
Data Breach

Caesars Entertainment Faces Multi-Million Dollar Lawsuit Over Data Breach

Caesars Entertainment is facing a lawsuit over a data breach. Allegations include negligence, invasion of privacy, and breach of contract.
Progressive Insurance Hit with Lawsuit Over Alleged Data Breach
Data Breach

Progressive Insurance Hit with Lawsuit Over Alleged Data Breach

Progressive Casualty Insurance Company faces a lawsuit alleging failure to protect customers' personal information during a data breach, a violation of the FTC Act.
HCA Healthcare Faces Class Action Lawsuit Over Data Breach
Data Breach

HCA Healthcare Faces Class Action Lawsuit Over Data Breach

Class-action lawsuit alleges HCA Healthcare violated data privacy laws, leading to a massive data breach affecting millions of patients.
PurFoods Faces Lawsuit Over Massive Data Breach: Damages Sought
Data Breach

PurFoods Faces Lawsuit Over Massive Data Breach: Damages Sought

Douglas and Goodon allege PurFoods' negligence led to a massive data breach, violating HIPAA and FTC Act, and seek damages for the compromised private information.
PurFoods Faces Multi-Million Dollar Lawsuit Over Alleged Data Breach
Data Breach

PurFoods Faces Multi-Million Dollar Lawsuit Over Alleged Data Breach

Lawsuit alleges PurFoods, also known as Mom's Meals, failed to protect customer data, leading to a breach affecting over 1.2 million individuals.
TMG Health Faces Lawsuit Over Alleged Data Breach
Data Breach

TMG Health Faces Lawsuit Over Alleged Data Breach

Lawsuit alleges TMG Health failed to protect clients' sensitive information, leading to a potential data breach. The company is accused of violating HIPAA and other laws.
MAPFRE Faces Lawsuit Over Alleged Privacy Violations - Damages Sought
Data Breach

MAPFRE Faces Lawsuit Over Alleged Privacy Violations - Damages Sought

Brian Conway files a lawsuit against MAPFRE and The Commerce Insurance Company for allegedly violating the DPPA by disclosing drivers' license numbers.
Rite Aid Faces Lawsuit Over Alleged Data Breach, Plaintiffs Seek Compensation
Data Breach

Rite Aid Faces Lawsuit Over Alleged Data Breach, Plaintiffs Seek Compensation

Rite Aid Corporation is accused of negligence and violation of data security and privacy laws in a lawsuit following a data breach that allegedly exposed customer information.
Clients Seek Damages from Regal Securities in Lawsuit Over Data Breach
Data Breach

Clients Seek Damages from Regal Securities in Lawsuit Over Data Breach

Lawsuit alleges Regal Securities, Inc. mishandled personal data, leading to a breach. Clients seek damages for negligence and violation of Illinois consumer protection laws.
Jackson National Life Insurance Faces Multi-Million Dollar Lawsuit Over Data Breach
Data Breach

Jackson National Life Insurance Faces Multi-Million Dollar Lawsuit Over Data Breach

Lawsuit alleges Jackson National Life Insurance Company failed to protect customers' personal data, leading to a data breach. Plaintiffs seek damages for invasion of privacy, lost productivity, and increased risk of identity theft.
Advance America Faces Lawsuit Over Data Breach, Plaintiff Seeks Damages
Data Breach

Advance America Faces Lawsuit Over Data Breach, Plaintiff Seeks Damages

Lawsuit alleges Advance America failed to secure and safeguard personally identifiable information, leading to a data breach.
Progress Software Corp. Faces Class Action Over Data Breach
Data Breach

Progress Software Corp. Faces Class Action Over Data Breach

A class-action lawsuit alleges that Progress Software Corporation and Maximus Federal Services failed to safeguard customers' personally identifiable information, leading to a significant data breach.
AMM Faces Class Action Lawsuit Over Data Breach, Plaintiffs Seek Damages
Data Breach

AMM Faces Class Action Lawsuit Over Data Breach, Plaintiffs Seek Damages

Lawsuit alleges Advanced Medical Management, LLC failed to protect sensitive personal data of over 300,000 individuals, leading to a data breach.
Mondelez Global Data Breach Class Action: 51k People Impacted
Data Breach

Mondelez Global Data Breach Class Action: 51k People Impacted

Mondelez Global LLC faces a class action lawsuit for allegedly failing to protect personal data, leading to a breach. The plaintiff seeks at least $5 million in damages.
Class Action Lawsuit - Ipswitch, Inc. & Progress Software Data Breach
Data Breach

Class Action Lawsuit - Ipswitch, Inc. & Progress Software Data Breach

Class action lawsuit alleges Ipswitch, Inc. and Progress Software Corporation's negligence led to a data breach, exposing sensitive personal information.
PharMerica Corporation Class Action Filed Over Data Breach
Data Breach

PharMerica Corporation Class Action Filed Over Data Breach

Pharmerica Corporation is facing a class action lawsuit alleging negligence in protecting customers' private information, potentially leading to a data breach.
Kraemer North America Faces Class Action Over Data Breach
Data Breach

Kraemer North America Faces Class Action Over Data Breach

Kraemer North America is facing a class-action lawsuit over an alleged data breach. The lawsuit alleges the company failed to secure employees' data and notify them promptly.
Apria Healthcare Class Action: Alleged Data Breach
Data Breach

Apria Healthcare Class Action: Alleged Data Breach

Lawsuit alleges Apria Healthcare failed to protect customer data, leading to a data breach.
$5 Million Lawsuit - Veridian Credit Union's Alleged Data Breach
Data Breach

$5 Million Lawsuit - Veridian Credit Union's Alleged Data Breach

Class action lawsuit alleges Veridian Credit Union failed to protect customer data, violating multiple laws.
Albertsons Data Breach: Class Action Lawsuit at least $5m
Data Breach

Albertsons Data Breach: Class Action Lawsuit at least $5m

Lawsuit alleges Albertsons Companies failed to protect personal information of customers in a data breach, violating privacy and security laws.