Florida homeowner sues Lennar over massive March data breach

In Miami federal court, Lisa DiMeglio initiated a class-action suit against Lennar Corporation and Lennar Mortgage, accusing the builder of lax data-security practices that led to a March cyber intrusion. The breach, which lasted from March 24 to March 30, allowed attackers to extract files containing Social Security numbers, birth dates, addresses and financial account information belonging to tens of thousands of customers.

DiMeglio contends that Lennar neglected basic safeguards such as network segmentation, employee training on social-engineering attacks, encryption and intrusion-detection systems. A former employee, Robert Ramkissoon, has filed a similar class action. Lennar said it reported the incident to law-enforcement and regulators, upgraded its defenses and will provide two years of complimentary identity-monitoring to those impacted. The lawsuit seeks compensation for the class members and highlights the broader risk of identity theft following data breaches.