Last month we covered a breach of Truist Bank that originally took place back in October. The hack by Sp1d3r was allegedly selling the private data of 65,000 customers at a cost of $1 million on the dark web. Customers were not alerted of what took place until May, over 6 months after the hack. Now, in two separate lawsuits, two of these users, Stephen Ruffin and Marshall Boyd, are stating that Truist failed “to properly secure and safeguard sensitive information of its customers.” They state that the disclosure to its customers omitted crucial information as well as the steps being taken by Truist to ensure that a breach of this magnitude would not take place again. They are seeking compensation for damages, as well as mandating that the bank undergo a comprehensive restructure of their cybersecurity program.
