Who Can Bring a Negligent Security Claim

If the Attacker Was Never Caught: What Negligent Security Means as a Legal Claim

Negligent security is a form of premises liability, the area of law that covers when a person or business that owns or controls property can be responsible for harm to people on it. A negligent security claim asks whether the party in control of the property failed to take reasonable security measures against a crime risk it knew about or should have known about, and whether that failure helped cause someone's injury.

The claim runs against the owner, manager or other party that controlled the property, not only against the attacker. That is why it can still matter when the person who committed the crime is unknown, has disappeared or cannot pay anything. The attacker's conduct is a crime. The property controller's conduct is judged by a different standard: whether it used reasonable care.

For someone who was hurt, the theory comes down to four questions. Did the property controller owe a duty of care, meaning a legal obligation to act reasonably toward people lawfully on the property? Did it fail to provide adequate security? Was there a foreseeable risk of criminal harm? And did that failure cause the injury? Foreseeability means that a reasonable property controller, given what it knew or should have known, could have anticipated that a crime of this kind might happen there. If any one of those answers is missing, a claim may not fit, even when the harm is serious.

State law governs these claims, and the elements and how courts apply them vary from state to state. Someone weighing a claim may find it useful to think through each of the four questions against what they already know about the property, and to note where the answers are uncertain; those gaps are a natural starting point for a conversation with an attorney. A broader overview of how a negligent security claim works is published elsewhere on this site.

Who the Law Recognizes as a Claimant

The person who was directly attacked or injured may bring a claim in their own name. That includes a tenant assaulted in a parking lot, a hotel guest robbed in a hallway, or a customer hurt during a crime at a business. When the injured person is a child, a parent or guardian generally acts on the child's behalf, though how that works is set by state law.

After a death, the law in each state allows certain family members or a representative to bring a wrongful death action. Because the person who died can no longer bring a claim, wrongful death lets the people left behind seek recovery for the losses the death caused them. For a grieving family, the state's rules decide who is able to act and in what form: who may bring the action, which family members it benefits, what damages the law allows and what procedural steps it requires all vary by state.

A visitor's legal status on the property can also affect the duty the owner owed. Many states sort visitors into categories such as invitees, licensees and trespassers. Invitees, a group that commonly includes customers, tenants and guests present for the business of the property, are generally owed the highest duty of care. Virginia's Supreme Court, quoting its earlier precedent in a 2021 opinion, described Virginia's common-law rule this way: an owner "owes a common law duty to its invitee (1) to use ordinary care to have the premises in a reasonably safe condition for the invitee's use consistent with the invitation, and (2) to use ordinary care to warn its invitee of any unsafe condition that was known, or by the use of ordinary care should have been known, to the owner." That is Virginia's rule; other states classify visitors and define these duties in their own ways.

Whether you were a paying customer, a resident, a guest of a tenant or simply passing through is one of the facts that shapes which duty applies, and it is a natural subject for a conversation with an attorney.

Where It Happened and Who Controlled the Property

Negligent security claims arise on many kinds of property, including apartment complexes, hotels, parking structures, shopping centers, bars and nightclubs, schools, hospitals, and other commercial or residential premises. The list is not exhaustive. What these places share is that someone controls them and invites or allows people to be there.

The legal question is control, not only who holds title. A property manager that runs day-to-day operations may owe a duty. So may a business tenant that operates its own space, or a security contractor hired to patrol or watch the property. Depending on the facts and the state, more than one of them may owe a duty at the same time, and the owner of record may have handed some responsibilities to others by lease or contract.

For someone hurt in a common area, this can feel like a puzzle. A parking garage may be owned by one company, managed by another and patrolled by a third. A shooting at a complex may involve a landlord, a management company and a contracted guard service. Because a duty generally follows control, the stake is concrete: a claim aimed at the wrong party may not reach the one responsible for the specific place at the specific time of the attack. A person in this position may weigh what they already know, such as the name on a lease, the management office they dealt with, or the company on a guard's uniform, and an attorney can help sort out how those pieces fit together.

Residential settings raise their own questions about common areas, locks, lighting and gates. Those issues are explained on the site's page on apartment complex negligent security.

Had This Happened Before? Foreseeability and What Was Known About Prior Crime

Courts in negligent security cases generally ask whether the property controller knew, or should have known, that a criminal act of this type was likely. A property controller is not generally treated as responsible for every crime that could occur anywhere, so the inquiry looks at what the risk on this property actually looked like before the attack.

One state's approach comes from Timberwalk Apartments, Partners, Inc. v. Cain, 972 S.W.2d 749, a 1998 decision of the Supreme Court of Texas addressing the duty owed to invitees by one who controls premises when the harm comes from a third party's criminal act. It sets out how Texas courts assess foreseeability in these cases. It is Texas's rule; other states use their own tests. How Texas applies its approach is covered on the site's page on negligent security claims in Texas.

The evidence that commonly bears on foreseeability includes prior police reports for the property or the surrounding area, the property's own incident logs, earlier complaints made to management, and crime statistics for the location. A property with a documented history of similar incidents presents a different picture than one with no earlier record. Even so, whether foreseeability is met depends on the specific facts and on the state's standard, and this page cannot conclude that any reader's situation meets it.

For families, this is often where the hardest questions sit: whether anyone had warned management, and whether earlier incidents were similar to what happened. If you know of past complaints, earlier incidents or neighbors who raised concerns, those details are worth noting, and an attorney can help assess how they may bear on the state's standard.

How Your Own Share of Fault Can Affect a Claim

In many states, a claimant's own conduct at the time of the incident can reduce or bar recovery. Two different legal rules handle this. Comparative fault means the finder of fact assigns a share of responsibility to each party, and the claimant's damages are reduced by their own share; some states bar recovery once that share passes a set threshold. Contributory negligence is a separate, older rule under which a claimant's own negligence, if proven, can bar recovery altogether. Fault rules differ significantly by state, and none of the three examples below is the rule anywhere else.

Washington is one example of a rule that reduces but does not bar recovery. Under section 4.22.005 of the Revised Code of Washington, "any contributory fault chargeable to the claimant diminishes proportionately the amount awarded as compensatory damages for an injury attributable to the claimant's contributory fault, but does not bar recovery."

Texas sets a threshold. Under section 33.001 of the Texas Civil Practice and Remedies Code, in an action to which that chapter applies, "a claimant may not recover damages if his percentage of responsibility is greater than 50 percent." Under section 33.012 of the same code, a claimant who is not barred has damages reduced by a percentage equal to the claimant's own share of responsibility. Texas also has a provision specific to crimes by unidentified people: under section 33.003, if a defendant alleges in an answer filed not later than 60 days after its original answer that an unknown person committed a criminal act that was a cause of the injury, the court shall allow that unknown person to be designated as a responsible third party when conditions are met, including that the defendant has pleaded facts showing a reasonable probability that the act was criminal.

Virginia follows contributory negligence. In Albritton v. Commonwealth of Virginia, decided February 4, 2021, the Supreme Court of Virginia described contributory negligence, "when proven," as "an absolute bar" to recovery. That is Virginia's rule.

A person who contributed to the situation is not automatically barred in most places, but the rule of the state where the attack happened shapes what recovery may look like. Questions about your own conduct that night can be part of a conversation with an attorney.

What the Injury Has to Show — and What It Does Not Decide Alone

A negligent security claim requires actual harm: a physical injury, an emotional injury the law recognizes, or a death. The nature and extent of the harm bears on which categories of damages the law may allow. Those general categories include medical expenses, lost income, pain and suffering, and, in death cases, wrongful death damages. They are categories the law names, not amounts, and which of them apply depends on the facts and the state.

An injury, however serious, does not decide a claim on its own. Being hurt on a property does not by itself show that the owner was at fault or that security was inadequate. The claim still has to show a duty, a breach of that duty, causation and damages. Causation means a link between the failure and the harm: that the security failure was a cause of the injury, not simply that the injury happened on the property. Virginia's Supreme Court, in the 2021 opinion above, described factual causation as often called the "but for" rule, with proximate causation as a second step that sets limits on responsibility; other states frame causation in their own words.

When you are facing medical bills, missed work or the cost of a funeral, it is natural to want a clear picture of what the law allows. That picture depends on state damages rules, including which categories are available and whether any caps apply, and on the facts; this page does not predict it for anyone. A person in this position may keep track of treatment, bills and time away from work, since those records connect the injury to the categories the law names, and an attorney can explain how the state's rules treat them.

Which Records May Matter After an Attack

Negligent security cases usually turn on records, because records show what the property was like before the attack and what happened during it. If you were hurt, the records that usually matter include police and incident reports, medical records, photographs and video from the scene, prior crime reports for the property or the surrounding area, maintenance and inspection logs, security staffing records, and the names and contact details of witnesses.

Each category connects to a part of the claim. Prior crime reports and earlier complaints bear on foreseeability, because they show what the controller knew or should have known. Security staffing records, along with maintenance and inspection logs for things like lighting, locks and gates, bear on breach, because they show what measures were actually in place. Police and incident reports and scene photos or video bear on what happened and on causation. Medical records bear on the injury and on the link between the attack and the harm.

Many of these records are held by the property, a security company or a police agency, not by the injured person or family. What is preserved and available early in a case can affect what a claim is able to show later. The elements these records support are laid out further in the site's explanation of an inadequate security lawsuit.

If it would help to talk through which records exist in your situation and who holds them, you can request a case evaluation with our attorney.