Sensitive personal information belonging to thousands of individuals was allegedly exposed after a data breach at a company responsible for handling membership records, according to a new class action lawsuit. The legal complaint claims that the companies responsible did not do enough to safeguard private details such as names and driver’s license numbers, putting affected people at risk for identity theft and other financial harm.
The suit was filed by Priscilla Alcantar in the United States District Court for the District of New Jersey on April 8, 2026, naming DanubeNet, Inc., doing business as Driving School Solutions, and the Automobile Club of Southern California as defendants.
According to the filing, the incident began when suspicious activity was detected on Driving School Solutions’ computer network on December 22, 2025. An investigation later revealed that an unauthorized third party had gained access to the network between July 10 and August 19, 2025. On January 16, 2026, it was determined that information relating to members of the Automobile Club of Southern California may have been involved in this security incident. The compromised data included full legal names and driver’s permit or license numbers.
The Automobile Club reported the breach to the California Secretary of State on March 9, 2026. Notices sent out by the club stated that there had been “unauthorized access to records in DSS’ systems between July 10, 2025 and August 19, 2025,” with compromised information including “record[s] containing your name and driver’s permit/license number.” Plaintiff Priscilla Alcantar received her notification letter on March 9, 2026.
The complaint argues that both companies owed a duty to maintain reasonable security measures for protecting personally identifying information (PII) collected from members. It states: “Defendants breached said duty by failing to implement and maintain reasonable security procedures and practices.” The plaintiff further alleges that despite knowing their networks were susceptible to cyber threats, defendants continued using inadequate systems without making necessary improvements.
Alcantar claims she has already suffered actual injury from the breach—including lost time and money spent mitigating potential harms—as well as emotional distress and loss of privacy. She also cites an ongoing risk related to identity theft due to her information being accessed during the breach. The lawsuit highlights broader impacts associated with data breaches: “Consumers are harmed financially,” referencing studies showing average costs per victim ranging from $150 up to $375 or more for identity theft incidents.
The legal arguments presented include negligence (for failing in their duty of care), breach of implied contract (for not safeguarding PII provided as part of receiving services), unjust enrichment (for benefiting from collecting member data without providing adequate protection), and violation of the California Consumer Privacy Act (CCPA). Regarding CCPA violations specifically, it is alleged that Driving School Solutions failed “to implement and maintain reasonable security measures” as required under state law.
Plaintiff seeks several forms of relief on behalf of herself and all others similarly situated whose information was compromised. Requested remedies include injunctive relief requiring improved security practices; actual damages; statutory damages where applicable; punitive damages; restitution; attorneys’ fees; litigation expenses; costs; prejudgment interest; equitable monetary relief; orders certifying nationwide classes or subclasses; and any other relief deemed proper by the court.
The case is identified as Civil Action No.: 3:26-cv-03718. Attorneys representing Priscilla Alcantar are Philip L. Fraietta (Bursor & Fisher P.A., White Plains, NY) and Stephen A. Beck (Bursor & Fisher P.A., Miami, FL).
Source: 326cv03718_Alcantar_v_Danubenet_Inc_Complaint_District_New_Jersey.pdf
