The New York Attorney General is suing Dunkin', claiming lax cyber-security led to thousands of customers having money stolen.
The lawsuit claims nearly 20-thousand customers who used the company's smartphone app to manage their DD cards were hacked and had money taken from their accounts. It also says the app developer had warned the company repeatedly about ongoing attempts to log in to customer accounts starting in 2015. The AG's office said the coffee and donut chain did not warn customers or make changes to protect the accounts.
The attorney general says that because the company did not fix the problem, 300-thousand customers had their accounts attacked in 2018. The AG's office suggests the company should face a fine of five thousand dollars per customer because they promised their accounts would be secure.