Two employees at hotels run by Disney recently filed a class action lawsuit in the Los Angeles County Superior Court, alleging that company ID cards compromise personal data and privacy, Westlaw Journal Employment reports.
According to the news provider, the lawsuit was filed by Kristi Richards and Jorge Iniestra on behalf of more than 20,000 Disney employees. The ID cards, the plaintiffs alleged, include a barcode that contains employees' Social Security numbers, which violates California Civil Code Section 1798.85.
While the Social Security numbers are not printed on the cards directly, they can be accessed using a barcode scanner, which, as the report pointed out, is a fairly common feature on many mobile devices. If a card is lost or stolen and recovered by someone with a smartphone, that person could potentially use the card to steal the cardholder's identity.
The ID cards are used for a variety of functions, including clocking in and out of work, access to restricted areas and for other security purposes. The lawsuit stated that Disney has been aware of the data security vulnerability for more than three years, when it was discovered by a security guard.
The plaintiffs seek to stop Disney from including personal information on the ID cards going forward, as well as damages for services to protect employees from any identity theft or fraud.
Identity theft and fraud tend to be low on many people's priority lists. But, according to a 2010 report by the Federal Trade Commission, identity theft made up more than a fifth of the 5.4 million complaints it received in 2009. Credit card fraud represented the most common form of identity theft, followed by government documents, phone and utilities fraud and employment.