Skip to main content
InjuryClaimHub
Premises Liability

Negligent Security Claims: When a Business Failed to Protect You

An assault on someone else's property can be the property owner's fault, not just the attacker's — if the crime was foreseeable and security was inadequate.

Written by InjuryClaimHub Editorial Team Fact Checked Published Updated
Table of Contents (8 sections)

A parking garage with three broken lights and a documented history of assaults is not just an unlucky place to be attacked — it can be a business’s own negligence. Negligent security claims exist because the property owner, not just the attacker, may have failed a duty to protect the people it invited onto its property, and pursuing that claim doesn’t depend on ever catching who actually did it.

Quick answer: A business or property owner can be liable for a criminal attack on its property under a negligent security theory — separate from any claim against the attacker — where the crime was reasonably foreseeable and the property’s security measures were inadequate for that specific risk. Foreseeability usually turns on prior similar incidents at the same or nearby locations. This claim does not require the attacker to be identified, caught, or sued, which is often the entire practical reason it exists.

Foreseeability: The Question Everything Turns On

A property owner is not an insurer against crime, and a claim requires more than “a crime happened here.” What courts actually look at:

  • Prior similar incidents at the same property, ideally the same type of crime, within a relevant time period — the single strongest evidence in most jurisdictions
  • Incidents at nearby, comparable properties in the same immediate area
  • The nature of the business — a nightclub, a parking structure, or extended-stay housing carries different foreseeable risks than a suburban retail store
  • Prior complaints or requests — tenants or patrons who previously reported broken lighting, a malfunctioning gate, or loitering that management ignored
  • Totality of the circumstances, which several states apply as a broader test not limited strictly to identical prior crimes

A location with a documented pattern — even of different but related offenses — is generally in a much stronger position for a claimant than one with no history at all.

What Counts as Inadequate Security

Measured against the specific foreseeable risk at that property, not a generic checklist:

  • Lighting — broken, insufficient, or removed fixtures in parking areas, stairwells, and walkways
  • Access control — broken locks, propped or malfunctioning gates, doors that don’t secure
  • Surveillance — non-functioning or absent cameras, especially where cameras were previously in place and removed or left broken
  • Security personnel — reduced patrols or staffing compared to what was previously provided, or none at all despite a documented history
  • Ignored complaints — a known defect that was reported and never fixed

A property that once had adequate measures and let them lapse is in a particularly exposed position, because the prior standard shows what the property itself considered necessary.

Who You’re Actually Suing

Three potential defendants, none of which requires identifying the attacker:

  • The property owner
  • The business operator, where different from the owner — a tenant business in a leased space, for example
  • A security company under contract to provide protection, if its own performance fell short of what it was hired to do

This structure is often the entire point. Attackers in these cases are frequently unidentified, judgment-proof, or already deceased or incarcerated for unrelated reasons — a civil claim against them alone is often worthless even when a criminal conviction exists. The property’s own negligence is a separate, often more collectible, source of recovery.

The Comparative Fault Question

Expect an argument that the victim’s own choices — walking alone, being out late, ignoring a general sense of unease — contributed to the harm. In most jurisdictions, ordinary conduct is not comparative fault for someone else’s criminal act, and these arguments are usually weak unless the claimant did something that materially increased risk beyond what the property’s own security failure created. See our guide to comparative negligence by state for how shared-fault rules generally apply, though this specific defense tends to fare poorly against a well-documented foreseeability case.

Evidence That Actually Wins These Cases

  1. Police reports and crime statistics for the property and surrounding area, going back several years
  2. Prior incident reports and tenant or customer complaints, obtained through discovery if not voluntarily produced
  3. Maintenance and repair records for lighting, cameras, locks and gates — showing what was reported broken and when it was or wasn’t fixed
  4. Security contracts and staffing schedules, compared against what was actually in place on the date of the attack
  5. Expert testimony on security industry standards for that type of property, where available
  6. Your own medical and psychological treatment records — see our guide to PTSD and emotional distress settlements for how the psychological component of a violent crime is documented and valued

Practical Steps

  1. Report to police regardless of whether you intend to pursue a civil claim — the police report is foundational evidence either way.
  2. Photograph the scene — lighting conditions, broken gates or locks, any visible defects — before they’re repaired.
  3. Request the property’s incident history and complaint records as early as possible; these are not always preserved indefinitely.
  4. Identify the actual owner, operator and any security contractor, which can require research beyond the property’s public name.
  5. Do not assume there’s no claim just because the attacker wasn’t caught. The property’s own liability is independent.
  6. Get medical and psychological treatment documented promptly, as with any personal injury claim.

Sources & Further Reading

  • Restatement (Second) of Torts § 344 — a business’s duty to protect invitees against harm from the acts of third persons, the foundational doctrine most state negligent security case law builds on
  • State premises liability case law on foreseeability of criminal acts and the duty to provide adequate security, which varies in the specific test applied (prior similar incidents vs. totality of the circumstances)
  • Security industry standards publications used as a basis for expert testimony on what security measures were reasonable for a given property type
  • See our guides to slip and fall settlement amounts against a business for the underlying premises liability notice framework, comparative negligence by state for how shared fault is generally assessed, and PTSD and emotional distress settlements for the psychological injury component common to these claims
  • See our guides to slip and fall settlement amounts against a business for the underlying premises liability notice framework, comparative negligence by state for how shared fault is generally assessed, and PTSD and emotional distress settlements for the psychological injury component common to these claims
  • Where the crime involved a firearm, a separate and heavily shielded question arises about the weapon’s manufacturer or seller — see our guide to firearm injury claims and PLCAA
  • Where the property is a hotel or motel, guests are owed a heightened common-law duty on top of the ordinary negligent security analysis — see our guide to hotel and motel guest injury claims

Frequently Asked Questions

Can I sue a business if someone else attacked me there?

Potentially yes, on a negligent security theory — separate from and in addition to any claim against the attacker directly, who is frequently unidentified, unavailable or judgment-proof. The property owner or business is not liable simply because a crime happened on their property; liability turns on whether the crime was reasonably foreseeable and whether the property took reasonable security measures against that specific kind of risk.

What makes a crime 'foreseeable' to a property owner?

Most states look at prior similar incidents on the same property or in the immediate area, the nature of the business and neighborhood, and sometimes expert testimony on the totality of the circumstances. A parking garage with a documented history of assaults, or an apartment complex that received prior complaints about a broken security gate, has a much stronger foreseeability case than a location with no such history.

What counts as inadequate security?

Common failures include broken or absent lighting, non-functioning security cameras, broken locks or gates, absent or reduced security patrols compared to what was previously provided, unaddressed known defects in access control, and inadequate staffing at a location with a documented history of incidents. What's 'adequate' is measured against the specific foreseeable risk at that property, not a generic standard.

Does it matter if I was partly careless — walking to my car alone at night, for instance?

Ordinary caution, or its absence, is not the same as fault for someone else's criminal act, and comparative fault arguments in these cases are usually weak unless you did something that genuinely increased the risk beyond what the property's own security failure created. This is a fact-specific question your attorney should evaluate rather than assume against you.

Who is the actual defendant if the attacker was never caught?

The property owner, the business operator, and sometimes a separate security company hired to provide protection — none of whom require the attacker to be identified or convicted. This is frequently the entire practical point of a negligent security claim: recovery does not depend on catching or successfully suing the perpetrator.

What evidence actually proves this kind of claim?

Police reports and crime statistics for the property and surrounding area going back several years, any prior incident reports or complaints the property received, maintenance and repair records for lighting, cameras, locks and gates, security company contracts and staffing schedules showing what protection was supposed to exist, and evidence of what was actually in place — or not — on the date of the attack.

Related Guides

About the Author

InjuryClaimHub Editorial Team

Research & Editorial

The InjuryClaimHub editorial team researches and writes plain-English guides to personal injury and accident claims. Every guide is built from primary sources — statutes, federal regulations, court rules and government data — and cites them so readers can verify the law themselves. We are not attorneys and our guides are not reviewed by one, which is why every guide tells you to confirm deadlines and figures with a licensed attorney in your state.