Cannabis distributor Stiiizy Inc. negligently failed to protect the personal information of customers that was exposed in an October data breach, a proposed federal class action said.
Plaintiff Robert Krauth alleged that Stiiizy breached its duties under common law, contract law, industry standards, the Health Insurance Portability and Accountability Act, and the Federal Trade Commission Act to implement reasonable and adequate data-security measures and provide timely notice of the breach.
Information exposed in the breach included names, addresses, dates of birth, ages, drivers’-license numbers, passport numbers, photographs, signatures appearing on government-ID cards, medical-cannabis cards, transaction histories, and other personal information, …
