Serasa Experian Faces Class Action in England for Data Breach

Serasa Experian Sued in England

Serasa Experian is the target of a class action in England, filed by citizens who accuse it of being responsible for one of the largest data breaches in Brazil's history. The incident occurred in 2021 and compromised information of around 223 million Brazilians, including data of deceased individuals.

Company's Denial

According to information from Estadão, Serasa denied being cited in the lawsuit and refuted the hypothesis of an invasion of its systems. "We regret and condemn the propagation of misleading information, which includes false promises of compensation or financial remuneration. Such content has no legal or technical basis," the company stated.

Class Action in England

Andrew Short, a partner at the law firm Mishcon de Reya, responsible for the action, explained that the lawsuit was filed in England due to Experian's headquarters in the country. Additionally, UK law allows individuals to unite in class actions.

Participation in the Action

So far, more than 25,000 people have already shown interest in participating in the class action. Any individual who feels harmed by the data breach can join the lawsuit.

Details of the Breach

The data breach was revealed in January 2021 by the cybersecurity company PSafe, which identified the exposure of information such as CPF, addresses, phone numbers, facial photos, education, CNPJ, and information related to INSS benefits, all of which were being sold online.

Impact and Future Prospects

This case highlights the growing vulnerability of personal data and the importance of cybersecurity. Class actions in jurisdictions where companies are headquartered may become an essential resource for victims of data breaches, emphasizing the urgent need for improvements in the protection of sensitive information.