Property Owner Liability for Inadequate Security and Assaults

When a visitor is assaulted in a poorly lit parking garage, a tenant is attacked after a broken lobby lock goes unrepaired, or a hotel guest is robbed after a door fails, the person who committed the crime is the obvious wrongdoer. Yet the law sometimes asks a second question: did the property owner do enough to prevent a foreseeable attack? When the answer is no, the owner may be liable under a theory known as negligent security or inadequate security. This article explains when US courts hold property owners responsible for crimes committed by third parties, how plaintiffs prove these claims, what defenses owners raise, and what practical steps reduce risk. It draws on the Restatements of Torts, leading court decisions, and criminology research. Why These Claims Exist Crime is not spread evenly across a city. Criminology research has repeatedly shown that it clusters at specific places. A well-known study by Sherman, Gartin, and Buerger in Criminology (1989) found that a small share of addresses in Minneapolis, roughly three percent, generated about half of all calls to police. Later work by David Weisburd, described as the "law of crime concentration," found that a small fraction of street segments in several cities account for a large portion of crime. This matters legally because it supports a core idea behind negligent security: a property with a history of problems is a predictable place for more of them. Owners who control such places are often best positioned to reduce the risk through lighting, locks, cameras, staffing, and maintenance. The General Rule and Its Exceptions Traditional common law says a person has no duty to protect others from crimes committed by strangers. Courts were reluctant to make property owners responsible for the intentional wrongdoing of independent criminals. Over the past several decades, however, courts have carved out exceptions based on special relationships and control of the premises. The Restatement (Second) of Torts § 314A recognizes special relationships, including those between innkeepers and guests and between businesses open to the public and their visitors. Section 344 goes further: a possessor of land who opens it to the public may be liable for harm caused by the intentionally harmful acts of third persons, and must use reasonable care to discover such acts and give warning or protection. The Restatement

(Third) of Torts (§ 40) likewise lists special relationships, including those between a business or landlord and those lawfully on the property. The most common defendants are: ● Landlords and property managers of apartment complexes and commercial buildings. ● Retail stores and shopping centers, especially those with large parking lots. ● Hotels and motels. ● Bars, nightclubs, and event venues. ● Hospitals, campuses, and parking facilities. A landmark early case is Kline v. 1500 Massachusetts Avenue Apartment Corp. (D.C. Cir. 1970). A tenant was attacked in a common hallway after the landlord allowed building security to decline while crime rose. The court held that the landlord had a duty to take reasonable steps to protect tenants, in part because only the landlord controlled the building's common areas and security. Foreseeability: The Central Battleground Almost every negligent security case turns on whether the crime was foreseeable. Courts have developed several approaches, and the one a state uses can decide the case. The specific harm rule. The oldest and narrowest approach requires that the owner knew or should have known of a specific, imminent danger to the plaintiff, such as a known threat by an identified person. Few states still use this in its strictest form. The prior similar incidents test. Many states ask whether comparable crimes happened on or near the property before. In Timberwalk Apartments, Partners, Inc. v. Cain (Tex. 1998), the Texas Supreme Court considered factors such as the proximity, recency, frequency, similarity, and publicity of earlier crimes. Its analysis showed that a few unrelated or dissimilar incidents may not make a violent assault foreseeable. The totality of the circumstances test. Other courts look at everything, including the property's location, crime in the neighborhood, the nature of the business, and its physical layout. Isaacs v. Huntington Memorial Hospital (Cal. 1985) rejected the view that only prior similar incidents on the property could establish foreseeability. The balancing test. Some courts weigh how foreseeable the harm is against how burdensome the proposed protection would be. In Ann M. v. Pacific Plaza Shopping Center (Cal. 1993), the California Supreme Court held that a high degree of foreseeability is required before imposing a burden as heavy as hiring security guards, while cheaper measures may require less. Posecai v. Wal-Mart Stores, Inc. (La. 1999) adopted a similar balancing approach and found no duty to provide armed guards on the facts, because previous crimes in the parking lot were few. The practical lesson is that prior incidents matter, but so do complaints, neighborhood crime, and the owner's own knowledge.

Proving Breach: What Counts as Reasonable Security? Once a duty exists, the plaintiff must show the owner failed to use reasonable care. There is no universal checklist. Courts examine what was reasonable given the property, the known risk, and the cost of protection. Common areas of dispute include: ● Lighting. Burned-out fixtures, dark stairwells, and unlit parking areas. ● Locks and access control. Broken gates, defective door locks, unsecured keys, and lost master keys. ● Surveillance. Missing, non-working, or unmonitored cameras. ● Personnel. Too few security guards, untrained staff, or failure to patrol known problem areas. ● Maintenance. Overgrown shrubs that hide attackers, broken fences, and unrepaired damage. ● Response to warnings. Ignoring resident complaints, police advisories, or recommendations from a security consultant. ● Warnings. Failing to alert visitors or tenants about known risks when other measures are not practical. Research offers some support for the value of these measures. A systematic review by Welsh and Farrington (Campbell Collaboration, 2008) found that improved street lighting was associated with roughly a 21 percent decrease in crime in experimental areas compared with control areas. A randomized experiment in New York City public housing developments by Chalfin and colleagues, published in the Journal of Quantitative Criminology (2022), found that adding temporary lighting reduced nighttime outdoor index crimes by roughly a third. A 40-year systematic review of CCTV by Piza, Welsh, Farrington, and Thomas (Criminology & Public Policy, 2019) found a modest overall reduction in crime, about 13 percent, with the strongest effects in parking facilities. Such findings do not set a legal standard, but security experts often rely on them to explain why particular measures are reasonable. The owner's own promises and policies Owners can create duties, or strengthen existing ones, through their own conduct. A lease that promises a "secure building," a marketing brochure advertising "24-hour security," or a written policy requiring nightly patrols can become evidence of what was reasonable. Under the voluntary undertaking principles in Restatement (Second) of Torts §§ 323 and 324A, an owner that begins to provide security must perform it with reasonable care. Failing to follow one's own security policy is often used as evidence of breach. Causation: Would Better Security Have Prevented the Attack? Proving that security was inadequate is not enough. The plaintiff must also show that the inadequacy probably caused the injury, meaning that reasonable security would likely have prevented the assault or deterred the attacker. This is often the hardest part.

In Saelzler v. Advanced Group 400 (Cal. 2001), a delivery worker was attacked by a group of assailants at an apartment complex with known crime problems and gates that did not work. The California Supreme Court upheld summary judgment for the owner because the plaintiff could not show that better security would more likely than not have prevented the attack by unidentified assailants who might have entered the property anyway. The case shows why plaintiffs often rely on expert testimony that ties specific security failures to how the attack occurred. Criminal Acts, Superseding Cause, and Sharing Fault Owners often argue that a criminal act is a "superseding cause" that cuts off their liability. Courts generally reject this argument when the criminal act is the very risk that made the owner's conduct negligent. The Restatement (Second) of Torts § 449 states that when the likelihood of a third party's harmful act is the hazard that makes the defendant's conduct negligent, that act does not relieve the defendant of liability. Another key question is how to divide fault between the property owner and the offender. Rules vary. Some states allow the jury to assign a percentage of fault to the criminal, even when that person is unknown or not a party to the lawsuit, which can significantly reduce the owner's share. Florida, for example, has a statute directing juries to consider the fault of the criminal actor in premises liability cases. Other states apply joint and several liability more broadly. Because this affects the value of a case, the state's apportionment rules are central. When the Attacker Is an Employee Not all assaults come from strangers. Owners can also face liability for violence by their own workers or agents. The doctrine of respondeat superior applies only when the employee acted within the scope of employment, which excludes many personal assaults. But owners can be directly liable for negligent hiring, retention, or supervision if they knew, or should have known, that an employee posed a danger. In Ponticas v. K.M.S. Investments (Minn. 1983), the court allowed a claim against a landlord that hired an apartment manager without reasonable screening, and who then used a passkey to assault a tenant. Background checks, reference checks, and careful control of master keys are therefore part of reasonable security. Key Evidence in Security Cases Plaintiffs and defendants typically gather: ● Police call logs and crime reports for the property and nearby area. ● Prior incident reports kept by management. ● Tenant or customer complaints and the owner's responses. ● Security policies, post orders, patrol logs, and staffing records. ● Surveillance footage and camera maintenance records. ● Lighting, lock, and gate maintenance records. ● Security consultant assessments or insurer recommendations.

● Testimony from security experts, who must meet the reliability standards of Federal Rule of Evidence 702 and Daubert v. Merrell Dow Pharmaceuticals (1993) in federal court and in many states. Because footage and logs may be overwritten, either side may face sanctions if relevant evidence is lost after litigation becomes reasonably foreseeable. Common Defenses ● No duty. The crime was not foreseeable, or no special relationship existed. ● No causation. Better security would not have prevented the attack. ● Comparative fault of the plaintiff. The plaintiff ignored warnings, entered a restricted area, or acted recklessly. ● Fault of the criminal. The owner asks the jury to assign most or all responsibility to the offender. ● Lack of control. The owner did not control the location where the attack took place, as with public streets or another party's premises. ● Statute of limitations. Deadlines for personal injury claims generally range from one to six years by state, and wrongful death claims often have their own, sometimes shorter, deadlines. ● Insurance issues. Many commercial policies exclude or limit coverage for assault and battery, especially for bars and nightclubs, so owners should review coverage carefully. Damages Victims may recover medical expenses, lost income, and non-economic damages such as pain, suffering, and emotional distress, including post-traumatic stress. Wrongful death claims allow families to seek damages under state statutes. Punitive damages are uncommon and usually require proof of conscious disregard for safety, as when an owner ignored repeated warnings. Some states cap certain damages, so results vary widely. Practical Steps for Property Owners 1. Conduct a documented security risk assessment. Review police data, incident history, and complaints, and update the assessment regularly. 2. Fix basic problems quickly. Broken locks, dead lights, and damaged gates are among the easiest issues for plaintiffs to prove. 3. Layer your measures. Combine lighting, access control, cameras, landscaping, and staffing suited to the property's risk. 4. Train staff and follow your policies. An unenforced policy can become evidence against you. 5. Screen employees and control keys. Use background checks and track master keys. 6. Respond to warnings and document the response. Keep records of complaints and what was done.

7. Be careful with promises. Do not advertise security features you do not actually maintain. 8. Preserve evidence after any incident. Save video, logs, and reports, and notify your insurer promptly. 9. Review insurance coverage. Check for assault and battery exclusions and adequate limits. Practical Steps for Victims and Families Seek medical care and report the crime to police, and ask for the incident report number. Write down what you remember, photograph the location and any broken locks or lights, and keep medical and financial records. Avoid discussing the case on social media. Ask a licensed attorney to send a preservation letter for video and security records, since these can be overwritten quickly. Public police records and prior complaints may help show foreseeability, and an attorney can help gather them. Conclusion Negligent security law tries to balance two ideas: criminals bear primary blame for their crimes, but property owners who control a place and know it is dangerous should take reasonable steps to protect the people they invite onto it. Cases usually turn on foreseeability, the reasonableness of the security measures, and whether better security would have made a difference. Because states apply different tests and fault rules, both owners and victims should rely on advice from a licensed attorney in the relevant state. Frequently Asked Questions (FAQs) 1. Can a property owner really be sued for a crime committed by someone else? Yes, in some circumstances. If the owner had a duty to protect visitors, the crime was foreseeable, and the owner failed to take reasonable security measures that would probably have prevented the harm, courts may hold the owner partly or fully responsible alongside the criminal. 2. What makes a crime "foreseeable" on a property? It depends on the state. Some courts look mainly at prior similar crimes on the property, others consider the neighborhood, complaints, and the nature of the business, and some weigh the likelihood of harm against the cost of protection. Documented warnings and repeated incidents make foreseeability easier to prove. 3. Does an owner have to hire security guards? Not always. Courts usually require reasonable measures based on the risk. In many cases, lighting, locks, cameras, and maintenance are enough, while guards may be required only when the danger is high and the burden is justified, as reflected in cases like Ann M. and Posecai.

4. What if the attacker is never caught? A claim can still proceed, but it is harder. The plaintiff must prove the owner's security was inadequate and that better security would probably have prevented the attack, and courts such as the one in Saelzler have dismissed cases where this link was too speculative. Expert testimony often plays a major role. 5. How long do I have to file a negligent security lawsuit? The deadline depends on the state and on whether the claim involves injury or wrongful death. Personal injury limits commonly range from one to six years, and claims against government-owned property may require earlier written notice. Speak with a licensed attorney as soon as possible.