For The People. Not The Powerful.

In Florida, a class-action lawsuit alleging that Ritz-Carlton did not warn patrons before including an automatic tip is moving forward. 

Unsuspecting patrons may have overpaid for their meals, leaving two tips instead of one. 

One such victim, the plaintiff Michael Fox, claims that he was unknowingly charged an 18% tip at three different Ritz-Carlton restaurants—at one there was no automatic tip warning, and at the other two it was labeled “suggested.”

However, the suit alleges damages not only to Michael Fox but to Ritz-Carlton patrons within the last 4 years who frequented any of the 10 Ritz-Carlton hotels and 49 restaurants in Florida, potentially totaling more than 5 million dollars. 

Were You Defrauded? Contact Morgan & Morgan

Always remember to carefully consider your bill. Refrain from immediately entering a tip and read to ensure that no tip has been automatically added. It never hurts to be safe and ask for clarification. If you believe that you have been defrauded by Ritz-Carlton or another establishment, contact Morgan & Morgan by filling out a free case evaluation form.

Data breaches are down compared to 2019, but you’d never guess that from the seemingly endless headlines about companies failing to safeguard their users’ information. According to the Identity Theft Resource Center, there were 540 breaches between January and June of this year — an average of 90 per month. These leaks exposed hundreds of millions of private records, so if you haven’t changed your passwords lately, now would be a great time to do so.

Here are five of the biggest data breaches of the year so far, and what you can do if you’ve been affected by one of them.

1. Estee Lauder

Earlier this year, researchers found a massive amount of information stored in an unsecured cloud database owned by Estee Lauder. The cosmetics company shut down the database after learning of its vulnerability.

• When breach was announced: February 2020
• Number of records exposed: 440 million
• Types of information: Email addresses, IP addresses, pathways, and ports

2. MGM Resorts

In February, Morgan & Morgan filed a lawsuit against MGM Resorts International over a data breach that exposed the personal information of what was originally thought to be 10 million guests.

In July, researchers learned that an MGM breach had exposed at least 142 million guests’ data. It’s still unclear whether this breach includes the original 10 million exposed records, or if it was separate from the initially announced one.

• When breach was announced: February 2020/July 2020
• Number of records exposed: 142-152 million
• Types of information: Names, birthdates, phone numbers, home addresses, and email addresses

3. Wishbone

Wishbone is a mobile application that lets users (many of them teens) vote on their favorite of two items, in categories such as movies, TV, and food. This spring, a hacker posted Wishbone’s entire user database online, available to download at no cost.

• When breach was announced: May 2020
• Number of records exposed: 40 million
• Types of information: Usernames, passwords, email addresses, phone numbers, and locations

4. LiveJournal

Rumors of a LiveJournal breach have persisted for years, and sure enough, 33 million user records appeared on hacking forums this spring. The data could be as much as six years old, and LiveJournal denies a breach even occurred, but you can check HaveIBeenPwned to see if your information has been exposed in this alleged hack (or others).

• When breach was announced: May 2020
• Number of records exposed: 33 million
• Types of information: Usernames, passwords, email addresses, and profile URLs

5. Marriott

In April, Morgan & Morgan filed a proposed class action lawsuit against Marriott International (again) after a data breach allegedly exposed the information of over 5 million customers. Marriott said that it discovered the breach at the end of February, but that the data had been exposed since mid-January. If this is true, more than two months passed between the time the breach happened and the time Marriott announced it.

• When breach was announced: March 2020
• Number of records exposed: 5.2 million
• Types of information: Names, birthdates, phone numbers, and loyalty account numbers

Contact a Data Breach Attorney

If a company failed to protect your personal information, and you suffered financial losses or fell victim to identity theft as a result of that breach, you could be owed money for damages. Morgan & Morgan is America’s largest personal injury law firm, and Law360 named us its Consumer Protection Group of the Year in part for our work as a “driving legal force” on data breach cases such as Yahoo and Equifax.

Our attorneys are experienced, diligent, and not afraid to go to trial to recover full compensation for our clients. To see if we can help you, contact us for a free, no-obligation case review.

Like everything else in 2020, holiday shopping is going to be more challenging than usual. 

Online buying may have its biggest year so far, and customers are also being urged to shop early to avoid delivery delays caused by backed-up orders.

This surge of internet shopping will undoubtedly encourage cybercriminals to step up their efforts to steal consumer information. The holidays are already one of the busiest seasons for data breaches, and hackers’ methods are always getting more sophisticated.

As an online consumer, protecting yourself is your first line of defense. With so many additional transactions this year, it’s a good time to review some basic guidelines for safe online shopping — both for over the holidays and the rest of the year, as well.

Use a Credit Card

While debit cards offer convenience, they are not as secure as credit cards for online transactions. Credit cards provide extra protection against fraud, and by law can only hold cardholders accountable for up to $50 in fraud cases while the case is resolved.

Debit cards directly access the user’s bank, so fraudulent activity could wipe out a shopper’s checking or savings account. And while most banks do offer protection against unauthorized transactions, it can take up to a month to resolve, leaving victims vulnerable at the worst time.

Protect Yourself Online

Although hackers will try hard to steal information this holiday season, by taking a few simple precautions you can protect yourself against many online attacks. Before you click to make a purchase, be sure to:

• Make sure you’re on a legitimate, secure website. Check that your website is the one you think it is, and not an imposter site with a slightly misspelled name. Also, make sure the website starts with “https,” not just “http.” The “s” at the end means that you are on a secure, encrypted website.
• Never click on a pop-up ad. While they may be offering excellent bargains, cybercriminals often employ bogus pop-ups to trick customers into giving out their financial information. Always place orders on a legitimate website, never a pop-up ad. 
• Research the source. It’s exciting to find new websites offering bargains, but sometimes their offers are too good to be true. Do your research before entering credit or debit card numbers on a site you’ve never heard of. They could be a hacker phishing for financial information.

Secure Your Computer

Security is not just about keeping safe on websites. Your computer itself needs to be secure in order to ensure that your online shopping is safe and private. Be sure to:

• Keep your browser up-to-date. Web browsers are always updating their products to safeguard against security threats. If you’re using an older version of a browser, you may be vulnerable. Always click “yes” when given the option to update your browser.
• Make sure your device is free of viruses and malware. Some viruses maintain a low-key presence on computer hard drives, quietly collecting data and sending it to hackers. Make sure you use updated antivirus software to keep your computer clean.
• Don’t auto-save passwords. While it’s very convenient, auto-saving passwords on your computer makes it easier for hackers to access your financial information. Try using a password manager to diversify and safeguard your passwords.

Stay Secure in Real Life, Too

While most online fraud begins on the internet, it can also start in the real world. Shoppers can secure themselves against cybercriminals by adhering to these safe practices:

• Don’t shop while using public WIFI. Never enter personal information over a public network. They are among the simplest to hack and make for easy targets for cybercriminals. Use a personal or secured network instead.
• Pay with a digital wallet. If you want to pay in person with your bank account but don’t want to use a debit card, try a digital wallet. Services like Apple Pay, Google Pay, and Paypal directly access your bank account with added encryption for security. 
• Watch out for real, physical hackers. Some cybercriminals get information by simply reading your PIN number over your shoulder at an ATM. Also, watch out for skimmers, which are devices attached to ATMs and other card readers that collect users’ financial information.

Watch for Data Breaches

Sometimes, in spite of all the precautions individuals take, information leaks anyway. Companies holding sensitive financial information can have data breaches, often leaving millions vulnerable to fraudulent transactions.

If you think this happened to you, Morgan & Morgan can help. We have filed some of the biggest data breach lawsuits in the country, including those against Equifax and Yahoo. 

If you suspect you may be the victim of a data breach, fill out our no-obligation case evaluation form and we will investigate.

So, before you go cybershopping for the holidays this year, take a minute to make sure that everything is as secure as possible. It will help keep you filled with good cheer, and not on the phone disputing fraudulent purchases.