Ceva Logistics sued over theft of employee records during data breach

Kevin Krupa, a former employee of Ceva Logistics, has filed a class action lawsuit against the company, alleging that it failed to protect sensitive employee information during a recent cyberattack. The breach occurred in late July when hackers gained access to Ceva's systems and data, disrupting operations at eight warehouses in Europe.

The lawsuit, filed in U.S. District Court for the Southern District of Texas, claims that personal information, including bank account details and social security numbers, was stolen. Ceva did not disclose the incident publicly. Two IT leaders, Bryant Duke and Susanne Shustein, left the company shortly before the lawsuit was filed, raising concerns about the company's response to the cyber threat.

Krupa alleges that Ceva did not adequately train employees on cybersecurity and failed to maintain reasonable security safeguards, rendering employees easy targets for cybercriminals. He also claims the company did not notify employees about the breach, preventing them from mitigating potential fraud. Krupa's lawsuit seeks at least $5 million in compensation and damages for Ceva's negligence, breach of implied contract, and unjust enrichment.