Coca-Cola is facing a potential class-action lawsuit after one of the people whose personal data was on one of a clutch of laptops stolen from the company says he suffered identity theft as a result of the breach.
Made public on 24 January this year, an employee had allegedly taken the machines without their loss being realized, said a report in TechWorld. The machines contained the records of 74,000 people, all current or former employees, including 18,000 revealing social security numbers.
Coca-Cola eventually recovered some of the laptops in December 2013. None of the records on the laptops had been encrypted said TechWorld.
According to Law360, plaintiff and former bottling engineer Shane Enslin, the lost data was used by thieves to make purchases with his credit cards and to apply for others, which affected his credit rating.
The suit also notes the lack of encryption and the alleged delay of several weeks in notifying victims after the breach was discovered, said TechWorld.
“The company that guards perhaps the best-kept secret in America, the Coke formula, failed to reasonably protect its employees from identify theft," Enslin’s lawyer Donald E. Haviland told Law360.
"As a result, the most trusted information about Mr Enslin and thousands of other Coke employees has fallen into the hands of criminals. The Enslins have been under siege ever since. This suit was brought because Coke refused to do the right thing, despite direct pleas by the Enslins,” he said.