A federal lawsuit has been filed against Paxton Media Group, alleging that the company suffered a cyber attack and data breach but waited three or more months before informing nearly 21,000 current and former employees their private information may have been stolen.
PMG is a Kentucky company with a principal place of business in Paducah, owning more than 100 publications across 14 states. Their flagship newspaper is The Paducah Sun, and they also own the Messenger-Inquirer in Owensboro.
The lawsuit was filed Sept. 22 and the first news of the filing came from reporter Jason Riley with WDRB in Louisville.
According to a copy of the 32-page lawsuit obtained by Owensboro Times, two plaintiffs are filing individually and on behalf of all others affected.
According to the nature of the action of the lawsuit, “unauthorized third-parties infiltrated and accessed the Company’s inadequately protected computer systems” between Feb. 26 and March 20 of 2021.
The lawsuit alleges that during that time the hackers obtained personally identifiable information (PII) of Paxton’s current and former employees, including names, dates of birth, Social Security numbers, driver’s license or state ID numbers, financial account and/or routing number information, health insurance information, taxpayer ID numbers, and credit card numbers and/or expiration dates.
At least 20,835 individuals were affected, according to the lawsuit.
The lawsuit claims PMG identified…