Elephant Insurance Co. was hit by a proposed class action over a data breach of its servers which compromised the personally identifiable information of over 2.7 million consumers.

Christopher Holmes sued the auto insurance company, claiming that cybercriminals were able to gain access to data that may have contained full names, driver’s license numbers, dates of birth, addresses, and other sensitive information.

Elephant Insurance didn’t notify the prospective class members about the data breach until two months after it became aware of it, Holmes said.

Because of the company’s negligence in securing customer data, over 2.7 million people have suffered …