Delaware – A class action lawsuit has been filed against the states benefit consultant AON over a security breach that exposed 22,000 personnel records of state retirees. My issue is that the lawsuit has been filed just against AON. While they are partly responsible for their part Delaware is equally or even more liable. After all they hired AON as the consulting company. If TJX had hired an outside firm for security and the breach still happened they would have been deemed liable since they hired they company to begin with.
But government is above liability since their intentions were in the right place. What are you doing to reduce your risks?