Most people assume that property owners are only responsible for accidents like slip and falls or broken steps. But premises liability law also holds property owners accountable when someone gets attacked, robbed, or assaulted on their property because security was too weak. These cases are called inadequate security claims. They are some of the most hotly contested liability claims because they force a property owner to pay for the deliberate criminal act of a third person—someone the owner never controlled. Whether the claim succeeds depends on a few hard facts: what the owner knew, what a reasonable owner would have done, and whether better security would have made a difference.
Property owners owe a duty to people who legally come onto their land. That duty includes taking reasonable steps to protect visitors from foreseeable harm. Foreseeable harm does not mean the owner had to see the specific attacker coming. It means that, based on past events in the area or on the property, a reasonable person would have realized that a crime was possible. For example, if a convenience store has had three armed robberies in the past six months, the owner cannot claim surprise when the fourth one happens and a customer is shot. The pattern makes the risk foreseeable. Courts call this the prior similar incidents test. The more similar the past incidents, the stronger the claim that the owner knew about the danger and ignored it.
But even without prior incidents on the exact property, foreseeability can come from the neighborhood. If the surrounding area has a high rate of violent crime, a jury may decide that any reasonable owner should have provided better security. This is especially true for commercial properties like shopping malls, apartment complexes, hotels, and parking garages. Owners of these types of properties are expected to know the crime statistics in their vicinity because they profit from inviting the public onto their land. A hotel near a dangerous downtown area cannot simply lock the front door and say they had no idea.
Once foreseeability is established, the next question is what steps the owner should have taken. There is no one-size-fits-all answer. The level of security must match the known risk. For a low-risk suburban retail store, a working lock on the back door and good lighting in the parking lot might be enough. For a high-crime apartment building, the owner may need things like security cameras, key-controlled entry gates, security guards, and proper fencing. If the owner failed to do what a reasonably prudent owner would have done under those circumstances, that failure is negligence.
The hardest part for the injured person is proving that the lack of security directly caused the attack. Even if the owner was negligent, the attacker is still a free-acting criminal. The owner is not automatically liable just because a crime happened. The plaintiff must show that better security measures would have prevented the attack or at least reduced the chance of it. This is often argued with expert testimony. For example, a security expert might testify that a locked gate would have kept the attacker out of the apartment building entirely, or that a security guard positioned at the entrance would have deterred the robbery. If the expert can convince a jury that the missing security measure was a substantial factor, the owner can be held responsible.
Property owners have defenses. The most common one is comparative negligence—arguing that the victim contributed to their own attack. If the victim ignored obvious warnings, walked alone through a known dangerous area late at night, or left a door unlocked, a jury may reduce or bar recovery. Owners also point to the open and obvious nature of danger. For instance, if a parking lot is dark and has a sign warning of previous carjackings, a court might find that the risk was obvious and the visitor assumed it. But that defense has limits. In many states, the open and obvious rule no longer completely shields property owners; it only reduces the duty or allows a jury to compare fault.
Inadequate security cases often involve serious injuries or death. The stakes are high, and the evidence is technical. Police reports, crime statistics, security audits, and expert opinions all play a role. For anyone considering such a claim, the core question is simple: Did this property owner have reason to know that someone could be attacked here, and did they do enough to stop it? If the answer to the first part is yes and the second part is no, the owner may have to pay.