A federal District Court judge in Illinois sided with the U.S. Department of Labor (DOL) in ordering Alight Solutions, LLC, an ERISA plan services provider, to comply with an administrative subpoena seeking documents pertaining to alleged cybersecurity breaches. The Court’s order in the case, Walsh v. Alight Solutions, LLC, Dkt. # 20-cv-02138 (N.D. Ill.), is

Most employers are generally aware of their fiduciary status as a “plan sponsor” of an ERISA-governed retirement plan (e.g., 401(k) and 403(b) plans). In fact, the employer’s hiring of a service provider is in and of itself a fiduciary function for which the plan sponsor is liable and at risk for any imprudent selection made.