Hackers stole the driver license info of millions of Oregonians but judge tosses lawsuit that faulted DMV oregonlivecom
pData collected by the Oregon DMV for driver licenses and ID cards was stolen in May 2023 That prompted a lawsuit in April 2024 A judge dismissed the lawsuit on April 17 2025ppAn Oregon judge last week threw out a lawsuit that sought to recover damages for as many as 35 million Oregonians whose driver license or ID card information was stolen in a massive international data breach in 2023ppMarion County Circuit Judge James Edmonds dismissed the case with prejudice meaning it cant be refiled after the state of Oregon argued that plaintiffs lawyers couldnt directly link the theft of personal information to any Oregonian suffering financial losses Although the plaintiffs lawyers pointed to one case where someone tried to open a Chase Visa card account the bank caught the fraudulent application and shut it down before any damage was done lawyers for the state successfully contendedppThe plaintiffs Caery Evangelist Brian Els and Bradley Larios sought classaction status for all affected state residents whose information including names addresses dates of birth last four digits of Social Security numbers heights and weights were hacked in May 2023 by a Russian cybergang according to the lawsuitppAlso hacked were an estimated 2770 public and private organizations from New York City schools to British Airways and the BBC amounting to more than 90 million victims worldwide according to the antimalware company EmsisoftppOregonians driver license and other personal data was accessed through data collected by Oregon Driver Motor Vehicle Services which is a division of the Oregon Department of Transportation ppState officials didnt respond to a request for comment for this storyppThe lawsuit states that a critical flaw in the departments MOVEit software provided by Progress Software Corporation created a vulnerability that the thieves exploited The plaintiffs faulted the state for allegedly not appropriately acting to protect Oregonians against that weakness ppTheir the states argument was We werent the ones protecting the data We hired this data provider Theres the ones that got hacked Its unfair to blame us said Paul Barton a Portland attorney representing the plaintiffs And our argument was Well youre the ones who hired them You had some duty of oversight to make sure they had the proper protections in placeppThe suit for reasons that werent explained didnt also list Progress Software Corporation as a defendant Barton said he didnt focus on that aspect of the case His cocounsels in Oklahoma and New York whom he said might be able to explain couldnt be reached for commentppThe lawsuit had sought a minimum of 10 million from the state as well as a lifetime of credit monitoring and identity theft insurance for all residents who were victimizedpp Aimee Green is covering the Oregon Legislature this session Reach her at 5032945119 agreenoregoniancom or on BlueskyppOur journalism needs your support Subscribe today to OregonLivecomppppIf you purchase a product or register for an account through a link on our site we may receive compensation By using this site you consent to our User Agreement and agree that your clicks interactions and personal information may be collected recorded andor stored by us and social media and other thirdparty partners in accordance with our Privacy PolicyppUse of andor registration on any portion of this site constitutes acceptance of our User Agreement updated 812024 and acknowledgement of our Privacy Policy and Your Privacy Choices and Rights updated 112025pp 2025 Advance Local Media LLC All rights reserved About Us The material on this site may not be reproduced distributed transmitted cached or otherwise used except with the prior written permission of Advance LocalppCommunity Rules apply to all content you upload or otherwise submit to this siteppYouTubes privacy policy is available here and YouTubes terms of service is available hereppAd Choicesp