A Massachusetts federal court lawsuit accuses Complete Payroll Solutions LLC of failing to protect sensitive employee data from hackers who breached the company’s systems in March 2024. Lead plaintiff Patrick Nowak filed the proposed class action Tuesday, claiming the Springfield-based payroll company violated its duty to safeguard personal information belonging to employees of client businesses.
The lawsuit alleges that Complete Payroll Solutions allowed Social Security numbers to be stolen during the cyberattack and failed to implement proper security measures. According to the complaint, the company maintained highly sensitive employee data in a vulnerable network without encryption or redaction.
Delayed Breach Notification
Complete Payroll Solutions waited over a month to notify affected employees about the March hack, finally sending notifications on April 25, 2024. The lawsuit argues this delay reduced employees’ ability to protect themselves against identity theft risks.
The complaint states that companies handling personal information have a fundamental obligation to protect it: “Businesses like Defendant that handle Private Information owe the individuals to whom that data relates a duty to adopt responsible measures to protect such information from disclosure to unauthorized third parties, and to keep it safe and confidential.”
Siri & Glimstad LLP attorney Christina Xenides represents plaintiff Nowak in the case. Complete Payroll Solutions has not responded to requests for comment regarding the allegations.
The case, Nowak v. Complete Payroll Solutions LLC, is being heard in the U.S. District Court for the District of Massachusetts under case number 3:25-cv-30088.