The lawsuit, filed by an Illinois woman and her daughter, claims that Pearson did not adequately safeguard the data and then failed to notify the people affected for more than four months after learning of the breach.
A Pearson spokesperson, noting that the company does not comment on pending litigation, pointed to a past statement in which the company said it has “strict data protections in place.”