If you are attacked or assaulted on commercial property—a shopping mall, a hotel parking lot, a gas station, or an apartment complex common area—you may have a premises liability claim against the property owner or manager. This is not about the person who physically harmed you. That person is a criminal. But the law can also hold the property owner responsible if they failed to provide reasonable security, and that failure directly contributed to your injury.
The core idea is simple: property owners have a legal duty to keep their premises reasonably safe for people who are legally on the property. That duty includes protecting you from foreseeable criminal acts by third parties. The key word is “foreseeable.” If the property owner knew or should have known that criminal activity was likely to occur in that location, they must take reasonable steps to prevent it. If they do nothing, and you get hurt, they can be sued.
What counts as reasonable security? That depends on the circumstances. A high-crime urban area with a history of armed robberies might require security guards, bright lighting, locked doors after hours, and surveillance cameras. A quiet suburban strip mall with no recent incidents might only need basic lighting and a working lock on the back door. There is no one-size-fits-all checklist. Courts look at the specific facts of each case: the location, the type of business, the hours of operation, the crime rate in the neighborhood, and any past incidents on the property or nearby.
The most important factor is the history of crime on that property or in the immediate area if it is similar in nature. If there have been several assaults, carjackings, or burglaries in the past year, the owner cannot plead ignorance. They are on notice. They must act. If they ignore that notice and someone is injured as a result, that is negligence. If there is no prior history, or the incidents were minor and unrelated, the owner may not be liable. The attack must have been reasonably predictable.
Another factor is the nature of the business. A bar that serves alcohol late at night has a higher risk of fights than a dry cleaner that closes at 5 p.m. A convenience store open 24 hours in a rough neighborhood has a higher duty than a church that only opens Sunday mornings. The more the business invites the public into a known high-risk environment, the more security is expected.
Common types of inadequate security claims include parking lot attacks, elevator or stairwell assaults, hotel room break-ins, and apartment complex muggings. In each case, the plaintiff must prove that the property owner breached their duty of care. That means showing that the owner did not take the precautions a reasonable person in the same situation would have taken. For example, if the owner knew that the elevator was poorly lit and that several tenants had reported strangers lurking in the hallway, but they did nothing, that is a breach.
The property owner can defend themselves in several ways. They might argue that the attack was not foreseeable. They might argue that they took reasonable security measures and the criminal still got through. They might argue that the victim was negligent themselves—for example, walking alone in a dark alley at 3 a.m. despite clear warning signs. In many states, if the victim was doing something illegal at the time, the claim may be dismissed entirely. And if the criminal act was sudden, random, and impossible to prevent, the owner is typically off the hook.
It is also important to understand that the property owner is not an insurer of your safety. They do not guarantee that no harm will ever come to you. They only have to do what is reasonable. If they have done everything a prudent owner would do, and the crime still happens, they are not liable.
If you are considering a claim, you must act quickly. Evidence disappears. Security footage gets erased. Witnesses move. And there is a legal time limit called the statute of limitations, which varies by state but is often one to three years from the date of the attack. Miss that deadline, and you lose your right to sue forever.
You also need to document everything. Take photos of the area, note the lighting conditions, get names of any employees or managers you spoke to, and keep a record of any incident reports filed with the police or the property owner. Your own actions matter too. If you contributed to the danger—for example, by walking through a clearly marked closed area—that can reduce or eliminate your claim.
Inadequate security claims are difficult but not impossible. They require solid evidence of foreseeability and a clear failure to act. If you can show that the property owner knew about the risk and did nothing reasonable to protect you, you have a strong case. If you cannot, you are likely out of luck.
