A class action complaint was filed by an ex-employee of Citrix for damages suffered following the security breach which allowed hackers to access Citrix’s internal assets for roughly six months and to steal sensitive personal information of both current and former employees. Citrix did not have adequate monitoring systems and controls in place to detect the unauthorized infiltration after it occurred, the complaint says. The class action claims Citrix failed to protect their PII data after collecting as an employment condition and for not informing its employees what data was stolen in the data breach.
Source: https://www.bleepingcomputer.com/news/security/citrix-sued-for-not-securing-employee-info-before-data-breach/