Data Breach Investigation of Leaked McMenamins Pub and Hotel Employee Information

Update 2/7/2022: On January 28, 2022 the law firms of Migliaccio & Rathod LLP and Breskin Johnson Townsend PLLC filed a class action lawsuit against McMenamins, Inc.  The lawsuit alleges that McMenamins failed to safeguard sensitive employee information in a ransomware attack that affected past and present employees from January 1, 1998 to December 12, 2021.  Among the categories of information lost in the ransomware attack were direct deposit banking details included in employees’ hiring documents.  Additionally, the lawsuit alleges that even though McMenamins has been aware of the incident since December of 2021, the company still has not been able to recover the personal data contained within the files lost during the ransomware attack.  The complaint is available for viewing here.

Migliaccio & Rathod LLP is currently investigating McMenamins, Inc., a Portland, Oregon company that operates hotels, movie theaters, bars, and restaurants throughout the Northwest, for failing to safeguard sensitive employee information in a data breach that occurred in December of 2021.  The data breach was caused by unauthorized access to the company’s network that locked its employee database and payment systems. Examples of the types of data exposed in the leak include names, dates of birth, addresses, social security numbers, and bank account information.

Cybercriminals commonly use information obtained from data breaches to commit a wide variety of identity theft.  For example, in previous data breaches, individuals have had to pay out of pocket for credit monitoring or for new fraudulent charges. Individuals may have noticed suspicious credit or banking activity, or purchase orders taken out in their name without their authorization. These fraudulent transactions sometimes do not manifest themselves for months after the data breach.

Have you received a data breach notification from McMenamins in the past year?

If so, we would like to hear from you.  Please complete the questionnaire below, send us an email at [email protected], or give us a call at (202) 470-3520.

The lawyers at Migliaccio & Rathod LLP have years of experience in class action litigation against large corporations, including in cases involving data breaches.  More information about our current cases and investigations is available on our blog.