Sneaker resale retailer StockX is facing a class-action lawsuit following the data breach last Summer that left it’s users’ personal information compromised.
According to court documents filed in the Eastern District of Michigan, Adam Foote, Anthony Giampetro, Kwadwo Kissi, Richard Harrington, Johnny Sacasas, and Chad Bolling, along with another unnamed minor are accusing the Detroit based company of failing to protect their personal information from the breach, where hackers then sold the stolen user information on the dark web. The lawsuit includes instances of stolen identities, fraudulent sneaker purchases, and the ongoing task to safeguard their personal information.
The plaintiffs claim that they weren’t notified of the data breach until August 8th, 2019, when the company sent out an email telling users to update their passwords because of “system updates.” This was 13 days after StockX became aware of the hack and three months after it took place. All plaintiffs are seeking monetary compensation in an amount to be determined at a potential trial. However, the company is arguing that the plaintiffs waived their right to a class-action suit when they agreed to the site’s terms of service, which says that all legal matters must be resolved through arbitration. In addition, StockX also claims that despite the breach, the plaintiffs have never requested that their StockX accounts be deleted.
StockX co-founder Josh Luber declined to comment on the lawsuit in an August 2020 episode of the Complex Sneakers Podcast, However, he did touch on the company’s reaction to the breach.
“We didn’t have enough information to make a full disclosure, to say everything that was going on,” Luber said, “but we knew that we needed to update everyone’s passwords and lock everything down ASAP.”
Luber has since left the company.
