As the arms race between cybercriminals and security systems rages on, with both leveraging new technologies to try to outsmart the other, data breaches are becoming commonplace — and so are lawsuits.

HR tech vendors, employment associations and employers themselves are getting hit with legal class-action complaints from angry workers who allege their personal identifiable information — including Social Security numbers, driver’s license numbers and financial account information — had been stolen due to an organization’s failure to adopt adequate security measures.

HR can play a big role in helping defend against cyberattacks, sources previously told HR Dive, including by training employees to identify phishing attempts and helping develop an incident response plan in the event of an attack.

Read on for four data breach stories affecting workers and employers so far this year.