Skip to Content

Ubiquiti, Inc. 

Securities Class Action

  • Date:
  • 7/19/2021
  • Company Name:
  • Ubiquiti, Inc.
  • Stock Symbol:
  • UI
  • Class Period:
  • FROM 1/1/2021 TO 3/30/2021
  • Status:
  • Filed
  • Court:
  • U.S. District Court: Southern District of New York

Case Finder

Locate any case using the tools below.

Bragar Eagel & Squire, P.C., a nationally recognized shareholder rights law firm, announces that a class action lawsuit has been filed in the United States District Court for the Southern District of New York on behalf of investors that purchased Ubiquiti, Inc. (NYSE: UI) securities between January 1, 2021 and March 30, 2021, both dates inclusive (the “Class Period”). Investors have until July 19, 2021 to apply to the Court to be appointed as lead plaintiff in the lawsuit.

Ubiquiti develops and markets equipment and technology platforms for high-capacity Internet access, unified information technology, and consumer electronics.

On March 30, 2021, after the market closed, Krebs on Security published an article entitled “Whistleblower: Ubiquiti Breach ‘Catastrophic’” stating that the Company had downplayed a data breach from January 2021 and that the “third-party cloud provider claim was a fabrication.” According to the article, the attacker(s) had accessed “privileged credentials that were previously stored in the LastPass account of a Ubiquiti IT employee, and gained root administrator access to all Ubiquiti AWS [Amazon Web Services] accounts, including all S3 data buckets, all application logs, all databases, all user database credentials, and secrets required to forge single sign-on (SSO) cookies.” As a result, the article noted that the Company should have immediately invalidated customers’ credentials and forced a reset, rather than asking customers to change their passwords when they next log on.”

On this news, the Company’s stock price fell $50.70, or 14.5%, to close at $298.30 per share on March 31, 2021, on unusually heavy trading volume.

The complaint alleges that throughout the Class Period, Defendants made materially false and/or misleading statements, as well as failed to disclose material adverse facts about the Company’s business, operations, and prospects. Specifically, Defendants, in their statements concerning the data breach, failed to speak fully and truthfully because they failed to disclose to investors: (1) that the Company had downplayed the data breach in January 2021; (2) that attackers had obtained administrative access to Ubiquiti’s servers and obtained access to, among other things, all databases, all user database credentials, and secrets required to forge single sign-on (SSO) cookies; (3) that, as a result, intruders already had credentials needed to remotely access Ubiquiti’s customers’ systems; and (4) that, as a result of the foregoing, Defendants’ positive statements about the Company’s business, operations, and prospects were materially misleading and/or lacked a reasonable basis.

If you purchased Ubiquiti securities during the Class Period and suffered a loss, are a long-term stockholder, have information, would like to learn more about these claims, or have any questions concerning this announcement or your rights or interests with respect to these matters, please contact Brandon Walker, Melissa Fortunato, or Marion Passmore by email at investigations@bespc.com, telephone at (212) 355-4648, or by filling out the contact form below.  There is no cost or obligation to you.

The individual or institution below (“Plaintiff”) has reviewed and agrees to the Bragar Eagel & Squire, P.C. (“BESPC”) retainer agreement and authorizes BESPC to prosecute an action on Plaintiff’s behalf under the federal securities laws or applicable state laws to recover damages on behalf of investors in Ubiquiti. BESPC will prosecute the action on a full contingency basis and will forward all costs and expenses.
 

Case Finder

Locate any case using the tools below.

You may share a link to this page on any of the sites listed below or send link via email: