Rumpke
Data Breach Class Action Lawsuit

Posted: December 11, 2024 -- Attention, victims of the Rumpke data breach.

Abington Cole + Ellery is investigating the data breach recently announced by Rumpke.

Rumpke Data Breach Summary:

Approximately 16,900 individuals were affected by the Rumpke data breach.

Breached data may include, but is not necessarily limited to: Social Security numbers, driver’s license or state or other ID numbers, financial account data, health insurance information (health plan enrollment and account data), health information (diagnosis data and codes), health billing and payment information (account numbers, payment amounts, claim numbers, billing codes, and balance data).

Rumpke recently notified affected parties of a cybersecurity incident. On October 11, 2024, the company became aware of a dark web posting by an unauthorized individual who claimed to have infiltrated and extracted information from its IT systems. In response, Rumpke claims to have immediately contained the breach and commenced a comprehensive investigation, enlisting the expertise of legal counsel and computer forensic specialists. Additionally, the company says it has collaborated with the Federal Bureau of Investigation to advance the inquiry.

Evidence purportedly suggests that the attackers initially gained unauthorized access to Rumpke’s computer infrastructure on July 20, 2024, through a compromised user account. As a consequence, these individuals were apparently able to access segments of the company’s network and obtain certain files related to Rumpke’s employees, their dependents, and information associated with Rumpke’s health plan, among other categories of data.

According to Rumpke, individuals impacted by this breach encompass both current and former employees, as well as their spouses and dependents enrolled in the Rumpke Consolidated Companies, Inc. & Affiliates Benefits Plan from 2015 until July 27, 2024. In the aftermath of this incident, Rumpke says it worked closely with its forensic service provider and legal advisors, implementing immediate improvements to its technological infrastructure, security measures, and organizational practices. Furthermore, the company is reportedly conducting a thorough reassessment of its security protocols to reinforce future safeguards against potential threats. It claims it is also enhancing its employee training initiatives to increase awareness and prevent similar incidents going forward.

As a result of the data breach, Rumpke is offering 24 months of free credit monitoring and/or identity theft protection services to some affected individuals.

Additional information about the Rumpke data breach may be found here: Rumpke Notice of Data Security Incident, and here: Rumpke Data Breach Notification (Maine).

About Rumpke:

Rumpke Waste & Recycling is a family-owned waste management company based in Colerain Township, Ohio. It was founded in 1932 and operates in multiple states across the Midwest, including Ohio, Kentucky, Indiana, and West Virginia. The company provides waste collection, recycling services, and landfill operations. Its facilities process a wide range of materials, including paper, plastics, and metals, contributing to the region's waste management infrastructure.

Rumpke manages several recycling facilities, including some of the largest recycling plants in the Midwest. These facilities handle single-stream recycling, which allows customers to place all recyclable materials into a single container for processing. The company has also invested in landfill gas-to-energy projects, which capture methane produced by waste decomposition and convert it into energy. These initiatives are part of its broader waste management strategies.

The company works with residential, commercial, and industrial customers to provide customized waste and recycling services. Its fleet of vehicles and operational infrastructure support waste collection and processing for urban, suburban, and rural communities. Rumpke also participates in community engagement through educational programs and partnerships, aiming to increase awareness about recycling and proper waste disposal practices.

The Rumpke Website may have additional information about or provide periodic updates regarding the data breach.

For more information about steps you can take to possibly reduce the chances harm arising from a data breach, please review the following article: What are some steps you can take if you've been the victim of a data breach?

If you believe you are a victim of the Rumpke data breach, and if you would like to volunteer to serve as a class representative in a class action lawsuit regarding this data breach, please submit your information via the form on this webpage. This website is not associated with nor authorized by Rumpke or any affiliated companies. If you have received any other data breach notifications, you may to review Abington Cole + Ellery's current list of data breach investigations.