Property security & civil claims

Inadequate Security Lawsuit: What a Claim Has to Show and How These Cases Work

General legal information · Updated November 10, 2026
A plain glass office building entrance vestibule on a bright clear morning.
Immediate answer

An inadequate security lawsuit must show duty, breach, causation and harm. How foreseeability, shared fault, evidence and state deadlines shape these claims.

On this page
  1. Key Takeaways
  2. What a Claim Has to Show
  3. Where These Attacks Happen and What Makes Security Inadequate
  4. Who May Be Responsible for Your Injury
  5. What Evidence Can Shape Your Claim
  6. What Losses the Law May Recognize After an Attack
  7. How the Injured Person's Own Conduct Can Affect a Claim
  8. Filing Deadlines Under the Applicable State's Law
  9. Questions Worth Asking Before Moving Forward With a Claim
  10. Frequently asked questions
  11. Sources

An inadequate security lawsuit is a claim against whoever controlled a property where someone was attacked. It asks whether that owner or operator had reason to anticipate crime, failed to take reasonable security measures, and whether that failure made the attack possible and caused real harm. Whether a claim exists depends on the facts and the state's law.

If you were assaulted, shot, robbed or hurt in a parking lot, an apartment hallway, a hotel or a bar, or if someone you love did not come home, you are carrying two things at once: the injury or the loss itself, and the question of why nothing stood between the attacker and the person who was hurt. Bills and missed work pile up while the police focus on the person who committed the crime, not on the property. Most people searching for answers are trying to understand whether the place where it happened bears any responsibility, and what a case like this would actually have to show.

This page walks through how these lawsuits work in general terms: the elements, the settings, the parties whose conduct is examined, the evidence, the damages the law may allow, and how fault and filing deadlines turn on the state where it happened.

Key Takeaways

An inadequate security claim belongs to premises liability, the area of law that governs injuries on property that someone else owns or controls. What sets it apart is that the immediate harm came from a criminal act by a third person, and the lawsuit asks a separate question: did the party in control of the property owe a duty of reasonable care to guard against that kind of crime, and did it fall short?

  • The central question is whether the person or business that controlled the property owed a duty of reasonable care and failed to meet it.
  • Foreseeability, meaning whether the party in control had reason to anticipate criminal activity, is the threshold issue in most courts.
  • The attacker's guilt does not by itself establish anything about the property; the claim stands or falls on what the property's controller knew, or should have known, and did.
  • Fault rules, limitation periods and damages rules differ from state to state, and no single state's rule applies everywhere.
  • Nothing on this page predicts an outcome or states what any case may be worth.

For someone recovering from an attack, these points shift attention from the moment of the crime to what came before it: the property's history, its condition, and the decisions made about its security. A first step many people consider is simply noting which state the attack happened in and what is already known about the property. The broader picture is set out on the page about the negligent security lawyer's role.

What a Claim Has to Show

Four elements make up an inadequate security claim, and each one has to be proved.

  1. Duty: the party that controlled the property owed the injured person an obligation to use reasonable care for their safety.
  2. Breach: that party failed to use reasonable care, for example by leaving a known risk unaddressed.
  3. Causation: the failure was a cause of the attack or the injury, not merely something that happened alongside it.
  4. Damages: the injured person or the family suffered real harm, such as medical expenses, lost income or physical and emotional injury.

Foreseeability is usually where these cases begin and often where they are decided. In plain words, it asks whether the party in control had reason to anticipate that a crime of this kind could happen on the property. Without foreseeability, many courts find no duty to guard against a third person's crime at all.

One court's articulation is a 1998 decision of the Supreme Court of Texas, Timberwalk Apartments, Partners, Inc. v. Cain, 972 S.W.2d 749. That court addressed the duty of one who controls premises when crime is foreseeable, and it identified factors bearing on foreseeability: the proximity of earlier crimes to the property, how recently they occurred, how frequently, how similar they were to the crime at issue, and how publicized they were. Those factors are weighed together. No single one decides the question, and they are not a checklist.

That is the Supreme Court of Texas's rule. Other states apply their own standards, some framed quite differently. For someone who was hurt, the stake is direct: if a court finds the crime was not foreseeable, the claim may end before the other elements are reached. That is why what is known about earlier incidents at or near the property carries so much weight, and why it is often one of the first things a family asks about when talking with an attorney.

Where These Attacks Happen and What Makes Security Inadequate

These claims arise wherever people are invited onto property that someone else controls and a crime happens there. The settings that come up most often include apartment complexes, parking garages and surface lots, hotels and motels, bars and nightclubs, shopping centers and transit stations. Each carries its own patterns of access, lighting and foot traffic, and its own questions about who decided how the space would be secured.

"Inadequate" is a word courts give content to case by case. The conditions they commonly examine include:

  • lighting that was absent, burned out or broken in walkways, stairwells or parking areas;
  • locks, gates or access controls that did not work or were left open;
  • no security personnel, or too few, where the property's history raised the question;
  • no surveillance in areas where earlier incidents had occurred.

None of these conditions creates liability on its own. A dark parking lot is not proof of negligence, and a working camera does not end the inquiry. Courts ask whether a condition was unreasonable in light of what the party in control knew about the risk, and whether it connects to how the attack happened. The same broken gate can mean one thing at a property with no earlier incidents and something quite different where similar crimes had been reported nearby.

If you were hurt in one of these places, what you remember about the scene, such as which lights were out or which door was open, may matter, and so may what had happened there before. Residential settings have their own considerations, covered on the page about apartment complex negligent security.

Who May Be Responsible for Your Injury

Control is the organizing idea. The party whose duty the law examines is the one that controlled the part of the property where the attack happened, or controlled the security decisions that bear on it. On a single property that can be more than one party, including:

  • the property owner;
  • a property manager or operator that runs the property day to day;
  • a commercial tenant that controls its own space, such as a bar or store within a larger center;
  • a security contractor hired to provide guards, patrols or monitoring;
  • in some circumstances, a manufacturer or seller of security hardware, such as a lock or access system, that failed.

Responsibility may be shared among several of them. An owner may have delegated management to an operator, which in turn hired a security company with written duties. Working that out means looking at documents most injured people never see: deeds, leases, management agreements, security contracts and the instructions given to guards. Those papers can show who was responsible for lighting, who controlled the gates, and whether a security company's job covered the area where the attack took place.

For a family, the stake is that the name on the sign may not be the party that made the security decisions, and a claim aimed only at that name may leave out the party whose conduct matters most. A conversation with an attorney can cover how ownership, management and contracts appear to fit together on the property involved.

What Evidence Can Shape Your Claim

Each element of a claim leans on its own kind of proof:

  • Police and incident reports establish what happened, when and where.
  • Prior crime reports for the property and the surrounding area bear on foreseeability: whether earlier incidents were close by, recent, frequent, similar or publicized.
  • Maintenance and inspection records, including lighting records and work orders for locks and gates, bear on breach, because they can show whether a condition was known and how long it went unaddressed.
  • Security contracts and post orders, the written instructions for guards, can show what security was promised and what was actually provided.
  • Surveillance footage can touch more than one element at once, showing both the condition of the property and how the attack unfolded.
  • Witness information and medical records fill gaps; medical records document the injuries, treatment and costs that bear on damages.

Much of the most important material, including footage, maintenance logs, incident files and security contracts, sits with the property owner, the operator or the security company, not with the injured person. In many cases that material is subject to legal obligations to preserve it once a claim is anticipated. For someone who was hurt, that means much of the proof that could support a claim is in other hands. Injured people and families often keep what is in their own hands: their medical records, photos of their injuries and of the scene, the police report number, and the names of anyone who saw what happened.

What Losses the Law May Recognize After an Attack

The harms in these cases follow from violent crime: injuries from assaults, gunshot wounds, stab wounds, injuries suffered during robberies, and sexual assault. Each category describes a kind of harm that arises in these claims, not a measure of any particular one.

Psychological harm is a recognized category of damages in personal injury law. Fear, trauma and the lasting effects of being attacked can be part of what the law considers, alongside physical injury. Economic losses are another category, including medical expenses, lost income and reduced earning capacity when an injury affects a person's ability to work in the future.

When an attack ends a life, the claim changes. Wrongful death is the claim a family may have after a loved one dies because of someone else's wrongful conduct. Surviving family members, or a representative on their behalf, bring it under each state's wrongful death statute. That state's law decides who may bring the claim, which losses may be considered, and how the claim is structured, and those rules differ by state.

Damages categories are defined by state law, and whether any damages are available, and in what form, depends on the facts and on the law of the state where the attack happened. In practical terms, losses that are not documented can be hard to show later. For that reason, many people keep medical bills, records of missed work, and notes on how the injury has affected daily life. This page does not state amounts or predict what anyone may recover, and its descriptions of injuries are not medical information.

How the Injured Person's Own Conduct Can Affect a Claim

In plain terms: in many states, a court or jury may divide responsibility among everyone whose conduct contributed to the harm, sometimes including the injured person and sometimes including the attacker, even if the attacker was never identified. Comparative fault, called proportionate responsibility in some states, is the system that does this.

Texas offers one named example, and it is Texas's rule only. Under section 33.001 of the Texas Civil Practice and Remedies Code, in an action the chapter applies to, a claimant may not recover damages if the claimant's percentage of responsibility is greater than 50 percent. If the claimant is not barred, section 33.012 reduces the damages by the claimant's own percentage. Who receives a share matters too: under section 33.003 of that chapter, the trier of fact determines percentages for each claimant, each defendant, each settling person and each responsible third party designated under section 33.004.

Section 33.004 matters in crime cases specifically, because it lets a defendant seek to designate a person as a responsible third party, someone not sued. Under section 33.004(j), if within 60 days after filing its original answer a defendant alleges that an unknown person committed a criminal act that was a cause of the injury, the court shall grant leave to designate that unknown person if the defendant has pleaded facts showing a reasonable probability the act was criminal, stated all identifying characteristics known at the time, and met the pleading requirements of the Texas Rules of Civil Procedure. Under section 33.004(i), designation or a finding of fault against that person does not by itself impose liability on them.

Put simply, for a person whose attacker was never caught, the property's side may ask that the unknown attacker be counted when fault is divided, so a share of responsibility can be assigned to someone who is not in the case at all. Separately, section 33.013 makes a defendant jointly and severally liable when its percentage of responsibility is greater than 50 percent, among other circumstances the section lists.

Other states differ. Some bar recovery once the injured person's share passes a threshold, some reduce recovery without a bar, and a small number still use contributory negligence. Because allocation affects what, if anything, a person may recover, a question many people bring to an attorney is how their own actions and the attacker's role may be weighed under their state's rule. The Texas negligent security page covers that state's rules further.

Filing Deadlines Under the Applicable State's Law

A statute of limitations sets how long a person has to file a lawsuit. For an inadequate security claim, that period is set by state law and differs from state to state, as do the rules for when the clock begins to run and the exceptions that may pause or extend it. No single period is the national rule. Wrongful death claims may carry their own limitation period under the applicable state's wrongful death statute, which can differ from the period for an injury claim in the same state.

A claim filed after the applicable period has run is typically barred, however strong its facts may be. For someone still recovering, that means the governing state matters from the start: the state where the attack happened usually supplies the deadline, the fault rule and the damages rules together.

This page does not set out any state's deadline. Which period governs, when it started, and whether any exception bears on it are questions answered by the specific state's law applied to specific dates. State-by-state overviews are collected in the site's negligent security guides and resources.

Many people find it useful to write down the state, the date of the attack and whether a death followed. A conversation about those details is something you can begin by requesting a case evaluation.

Questions Worth Asking Before Moving Forward With a Claim

After an attack, the questions tend to arrive all at once. Each connects to a different part of a claim, and a gap in any one can affect whether the claim holds together:

  • Which state's law applies, and what its fault and deadline rules are.
  • Whether the property's history, such as earlier crimes nearby, how recent, how frequent, how similar and how well known, may support foreseeability.
  • Who controlled the property and its security: the owner, a manager, a tenant, a security contractor, or more than one.
  • What evidence exists, and where it is held, especially footage, incident files and maintenance records in the hands of others.
  • How the applicable state's fault rules may treat the conduct of everyone involved, including a person who was never identified.

These are the issues a conversation with an attorney can cover, one at a time, in light of the specific property and incident.

A note on scope: this page explains how inadequate security lawsuits work in general terms. It does not set out any one state's deadlines, describe court procedure, which differs by state, or offer medical information about injuries, and it does not address injuries that did not involve a crime on someone else's property.

Free case evaluation

No Fee Unless We Win Your Case

A free case evaluation is how it starts. Tell us what happened, and we’ll help you understand your options. You pay no fee unless we win your case.

Negligent Security Claims Authority

How it works

  1. Call us or request a free case evaluationTell us what happened, in your own words.
  2. Talk through your caseYour options, and what your case may be worth.
  3. No fee unless we winYou pay no attorney fee unless we win your case.
Before your next step

A considered next step.

Frequently asked questions

What is an inadequate security lawsuit?

It is a premises liability claim against whoever controlled a property where a crime occurred, alleging that the controller failed to use reasonable security against a foreseeable risk. The claim has to show a duty, a breach of that duty, causation and damages. Whether particular facts meet those elements depends on the property, the incident and the state's law.

What does 'foreseeability' mean in a negligent security case?

Foreseeability means the party controlling the property had reason to anticipate criminal activity, often because of earlier crimes on or near it. A 1998 decision of the Supreme Court of Texas weighed proximity, recency, frequency, similarity and publicity of earlier crimes together. That is Texas's rule; other states apply their own standards.

Who can be sued in an inadequate security case?

The parties whose conduct may be examined include property owners, managers or operators, commercial tenants controlling the space, security contractors, and sometimes manufacturers or sellers of failed security hardware. The question turns on who controlled the relevant part of the property and what obligations each party had under leases and contracts.

What kinds of injuries do these cases involve?

These cases arise from assaults, shootings, stabbings, robberies and sexual assaults on property someone else controlled. Physical injury, psychological harm and economic losses such as medical expenses and lost income are recognized damages categories. Where a person dies, surviving family members may have a wrongful death claim under the applicable state's law.

How long does someone have to file an inadequate security lawsuit?

The statute of limitations is set by state law and differs by state, including when it begins to run and what exceptions apply. Wrongful death claims may carry a separate period under the state's wrongful death statute. A claim filed after the applicable period is typically barred.

Does the injured person's own conduct affect a claim?

It can. Most states use some form of comparative fault, which may reduce or, in some states, bar recovery. In Texas, under section 33.001 of the Texas Civil Practice and Remedies Code, a claimant whose responsibility is greater than 50 percent may not recover. Other states use different rules.

What evidence is typically relevant in these cases?

Police and incident reports describe the attack. Prior crime reports bear on foreseeability. Maintenance, inspection and lighting records bear on breach. Security contracts and post orders show what security was provided. Surveillance footage may bear on several elements. Witness information and medical records, the latter bearing on damages, complete the picture.

Can a family member bring a claim if someone was killed?

Surviving family members may have a wrongful death claim under the applicable state's wrongful death statute. State law decides who may bring the claim, which losses may be considered and the deadline that applies, and those rules differ by state.