Adidas America and the University of Chicago Medical Center are facing data breach lawsuits for breaches of sensitive personal information caused by third-party vendors.
Plaintiffs in the lawsuits allege that both organizations failed to adequately protect personal information, leading to data falling into the wrong hands.
Lawsuits claim that Adidas did not provide sufficient information about the breach, and the University of Chicago Medical Center allegedly didn't encrypt or redact compromised data.
The cases highlight the trend of holding companies accountable for breaches by third-party vendors, raising questions about the extent of responsibility in ensuring data security.