PNI Digital Media, a software photo service vendor to several leading retail stores, is the target of a class action lawsuit that alleges the company failed to protect the personal information of consumers from hacking incidents that occurred between June 2014 and July 2015. The data breach included the theft of private information such as names, addresses, phone numbers, user names, passwords, and the credit card numbers required for making online transactions. The suit contends PNI did not take adequate measures to protect its customers. As a result, their personal and financial information has fallen into the hands of criminals.
PNI Digital Media is headquartered in Vancouver, BC, Canada. The software company connects itself with retail stores to operate kiosks where customers purchase on-demand photo and printing services. In July 2014, PNI Digital Media was acquired by Staples, Inc. The company manages kiosks within mega-retailers such as Costco, CVS, Rite Aid, Sam’s Club, and Walmart Canada.
The class action suit was filed in a Washington State court by Brandee J. Faria. During the class period, Faria received an email from Costco Photo Center stating that her personal information was compromised as a result of a PNI Digital Media data breach. Faria had an account online at the Costco website’s photo center, where she had logged her personal and financial information, believing it to be safe and protected from hackers. The email Faria received from Costco informed her of a “security compromise” and that the company “did not know the extent of the impact,” other than that “several retailers were affected.” The email concluded with the recommendation that Faria reset and change her password on all sites where she used online photo services.
The lawsuit contends that Faria has spent a significant amount of time dealing with the fallout of the data breach, in addition to the harm caused by having her personal and financial information possibly sold on the Internet black market. Some of the questions that have arisen in the class action suit include whether PNI Digital Media knew or should have known its software was vulnerable to attack, and its failure to act in a timely manner resulted in the theft of personal information for possibly thousands of people.
This case was filed ion October, 2015. We will update the status in early 2016.