New York Attorney General Letitia James announced a lawsuit Thursday against Dunkin' Brands for failing to notify customers about cyberattacks.
The attorney general said Dunkin' Donuts violated state law by not notifying almost 20,000 customers, including more than 2,000 in New York, about cyberattacks on their accounts in 2015 and inadequately warning more than 300,000 customers in 2018 about another attack.
The suit says the company knew in 2015 that a series of attacks had been made on customers' online accounts, but it says the company did not inform the customers or fully investigate. The suit says Dunkin' also kept customers in the dark about the full extent of 2018 cyberattacks.
Dunkin' Brands said there is "absolutely no basis" for James' suit, that there was an investigation and no account was wrongfully accessed.
