Transamerica sued by 401(k) participant over data breach

Transamerica sued by 401(k) participant over data breach
A bug earlier this year let plan sponsor clients view outside participants' data, and one man claims he and others suffered consequences.
DEC 15, 2021

A breach of 401(k) participant data earlier this year prompted a class action lawsuit this month against Transamerica Retirement Solutions.

In June, the company became aware of a change within one of its websites that let employer customers view compromising data about participants in other retirement plans, according to a notice posted by the State of California. That data included Social Security numbers, birth dates and other personally identifying information.

The data was only viewable by plan administrators who had permission to access the site, the company stated in the disclosure sent in August to 401(k) participants. At the time, Transamerica said that it was unaware of any participant data being misused, it had fixed the glitch and would provide two years of identity monitoring services to people whose data were compromised.

But that was insufficient, the plaintiff representing the proposed class said.

The company failed to protect sensitive information and waited too long to make 401(k) participants aware of the problem, according to the Dec. 3 complaint filed in U.S. District Court in the Southern District of New York.

That man, California resident Eric Giannini, “has experienced a number of harms as a result of the data breach incident since Transamerica’s systems were accessed, including the misuse of his identifying information for fraudulent purchases,” the complaint read.

Giannini claimed that he was not contacted about his data being compromised until Oct. 8.

The law firm representing him and the proposed class, Migliaccio & Rathod, said in the complaint that the affected plan participants “will continue to experience various types of misuse of their [personally identifying information] in the coming years, including but not limited to unauthorized credit card charges, unauthorized access to email accounts and other fraudulent use of their financial information.”

The complaint alleges negligence, breach of contract, breach of fiduciary duty and violations of New York and California state laws.

The case differs from others brought in recent years against retirement plan record keepers over data security, in that it is a class action and does not indicate that any 401(k) assets were pilfered.

Individual lawsuits against Alight Solutions and plan sponsors, for example, centered on thefts from accounts.

The new case also does not raise claims under the Employee Retirement Income Security Act.

Transamerica said in a statement that it was aware of the lawsuit, calling the allegations “inaccurate and misleading.”

“At no time did unauthorized individuals gain access to Transamerica’s systems as the lawsuit suggests,” the statement read. “Transamerica is proud of the services we provide to our retirement plan clients, and we will vigorously defend against this lawsuit. We remain dedicated to providing the highest quality of care and security to our customers.”

Latest News

The 2025 InvestmentNews Awards Excellence Awardees revealed
The 2025 InvestmentNews Awards Excellence Awardees revealed

From outstanding individuals to innovative organizations, find out who made the final shortlist for top honors at the IN awards, now in its second year.

Top RIA Cresset warns of 'inevitable' recession amid tariff uncertainty
Top RIA Cresset warns of 'inevitable' recession amid tariff uncertainty

Cresset's Susie Cranston is expecting an economic recession, but says her $65 billion RIA sees "great opportunity" to keep investing in a down market.

Edward Jones joins the crowd to sell more alternative investments
Edward Jones joins the crowd to sell more alternative investments

“There’s a big pull to alternative investments right now because of volatility of the stock market,” Kevin Gannon, CEO of Robert A. Stanger & Co., said.

Record RIA M&A activity marks strong start to 2025
Record RIA M&A activity marks strong start to 2025

Sellers shift focus: It's not about succession anymore.

IB+ Data Hub offers strategic edge for U.S. wealth advisors and RIAs advising business clients
IB+ Data Hub offers strategic edge for U.S. wealth advisors and RIAs advising business clients

Platform being adopted by independent-minded advisors who see insurance as a core pillar of their business.

SPONSORED Compliance in real time: Technology's expanding role in RIA oversight

RIAs face rising regulatory pressure in 2025. Forward-looking firms are responding with embedded technology, not more paperwork.

SPONSORED Advisory firms confront crossroads amid historic wealth transfer

As inheritances are set to reshape client portfolios and next-gen heirs demand digital-first experiences, firms are retooling their wealth tech stacks and succession models in real time.