There is a particular kind of violation in being hurt not by an accident but by another person’s deliberate act, in a place where you had every reason to feel safe. A dim, unmonitored parking garage. A bar that lets a brewing fight spill into the street. An apartment building with a broken exterior lock and a door propped open for anyone to walk through. A hotel that never repaired the gate it knew was failing. When an assault happens in a place like that, the attacker is the obvious wrongdoer, but they are often not the only one responsible, and frequently not the one who can actually be held to account.
Massachusetts recognizes that the people who own and run the places we visit are responsible for the safety of those places, and that this responsibility can include taking reasonable steps to protect visitors from foreseeable crime. When a property owner ignores that responsibility and someone is harmed as a result, the law calls it negligent security, and it can make the owner, not just the attacker, answerable for the harm that follows.
This is one of the more difficult areas of injury law to navigate, because it sits at the intersection of a criminal act and a civil duty, and because property owners and their insurers tend to fight these claims hard. But for someone recovering from an attack that better security might have prevented, understanding how negligent security works, what makes an owner liable, and who can actually be held responsible is the difference between absorbing the cost alone and holding the right parties accountable.
None of this is about minimizing what the attacker did. The criminal justice system exists to address the crime, and it should. But a criminal case is about punishing the offender, not about compensating the person who was hurt, and it often leaves a victim with serious injuries, mounting bills, and no real source of recovery. A negligent security claim runs on a separate track, in civil court, and asks a different question: not who should be punished, but who, besides the attacker, failed in a duty that helped make the harm possible.
What negligent security means
Negligent security is a branch of premises liability, the body of law that governs a property owner’s responsibility for the condition and safety of their property. Massachusetts settled on a single, sensible standard for that responsibility decades ago. In Mounsey v. Ellard, 363 Mass. 693 (1973), the Supreme Judicial Court did away with the old categories that gave different visitors different levels of protection and held that an owner owes a duty of reasonable care to all lawful visitors in the circumstances. Whether you are a customer, a tenant, a guest, or anyone else rightfully on the property, the owner has to act reasonably to keep you safe, a duty that runs through the whole law of premises liability.
The harder question is whether that duty reaches the criminal acts of other people, and Massachusetts answers that it can. In Mullins v. Pine Manor College, 389 Mass. 47 (1983), the Court held that a property owner can owe a duty to protect lawful visitors from the foreseeable criminal conduct of third parties, and that an owner who fails to provide reasonable security against a foreseeable attack may be liable when that failure leads to harm. The case arose from the assault of a college student on a campus with inadequate lighting, patrols, and locks, and the Court made clear that keeping people reasonably safe can include guarding against crime, not just repairing a broken stair.
It is important to be precise about what this does and does not mean, because that distinction is where these cases are won and lost. Negligent security is not a guarantee of safety, and an owner is not automatically liable simply because a crime occurred on the property. Liability turns on two things together: that the criminal act was foreseeable, and that the owner failed to take the reasonable security measures the situation called for. A random, genuinely unforeseeable act in a place with sensible precautions is very different from a predictable attack in a place the owner left dangerously unprotected, and most of the fight in a negligent security case is over which of those two stories the facts actually tell.
This also means a negligent security case can move forward whether or not the attacker is ever caught or convicted. The civil claim does not depend on a criminal conviction; it depends on the owner’s conduct and the foreseeability of the harm. A victim does not have to wait for the criminal process to conclude, and waiting can in fact be costly, because the civil deadlines run on their own schedule and the evidence the civil claim needs is often in the property owner’s hands and easily lost. The two systems address the same event but answer to different rules, and a person hurt by an assault has reason to pay attention to both.
When an attack is foreseeable
Because foreseeability is the heart of the claim, it is worth understanding how Massachusetts measures it. A common assumption is that there must have been a prior, nearly identical crime at the exact spot before an owner can be on the hook, but Mullins expressly rejected that narrow rule. Prior incidents are one important factor, and a powerful one, but they are not the only one; foreseeability is judged on all the circumstances. The nature and location of the property, the character of the surrounding area, the type of business being run, the complaints and warnings the owner received, and obvious physical vulnerabilities all bear on whether a reasonable owner should have anticipated the risk and done something about it.
In practice, certain settings come up again and again. Apartment complexes and rental housing with broken exterior doors, failed locks, or dead lighting; parking lots and garages that are dark, isolated, and unmonitored; bars and nightclubs where alcohol, crowds, and a history of altercations make violence predictable; hotels and motels with unsecured entrances; and businesses in areas with known crime problems that nonetheless skimp on cameras, lighting, or staff. None of these places is automatically liable when something terrible happens, but each is a setting where a reasonable owner is on notice that security matters, and where ignoring it can cross the line into negligence.
A simple example shows how the pieces fit together. Suppose a tenant in an apartment building had complained for months that the lock on the main entrance was broken and that strangers were wandering the halls, and the landlord did nothing. If a tenant or a guest is then attacked by an intruder who walked in through that unsecured door, the elements line up: the danger was known and complained about, the fix was simple and ordinary, and the failure to make it is what let the attacker in. Change the facts, a working lock, no warnings, an attacker who would have gotten in regardless, and the same incident may support no claim at all. The line is rarely obvious from the outside, which is why these cases turn on a careful look at what the owner knew and what they did about it.
The other half of the question is what reasonable security would have looked like, because a claim must show not only that an attack was foreseeable but that ordinary measures could have reduced the risk. Working locks and adequate lighting, functioning cameras, controlled access, trained security staff where the setting warrants it, and prompt attention to known problems are the kinds of steps that get weighed. The standard is never whether the owner could have prevented every conceivable crime, but whether they did the reasonable things their situation called for, and whether the gap between what they should have done and what they actually did is what allowed the harm to happen.
It also helps to understand that reasonable security is contextual, not a fixed checklist. What is reasonable for a small shop on a quiet street is different from what is reasonable for a late-night club or a large parking garage, and the law does not demand that every property be turned into a fortress. The measure is proportion: the greater and more foreseeable the risk, the more an owner is expected to do about it. A place that draws crowds, serves alcohol, or sits in an area with known problems is held to a correspondingly higher practical standard than a low-risk setting, and the failure that matters is the gap between the risk the owner faced and the response they chose.
Who answers for the harm, and what a claim recovers
One of the practical reasons negligent security matters is that the attacker is often not a realistic source of recovery. They may never be identified, may have no assets, or may be facing criminal charges that do nothing to compensate the person they hurt. Pursuing a negligent security claim is not about excusing the attacker; it is about reaching the parties who had both the ability to prevent the harm and the means to answer for it. That usually means the property owner, and often the management company, the landlord, or the business operating on the premises. Where more than one of them shared control over security, more than one may share responsibility, and untangling who was actually responsible for the conditions that allowed the attack is a central part of the case.
Identifying the right defendants is not always straightforward, because ownership, management, and security are often split among different companies, each ready to point at the others. A building may be owned by one entity, managed by a second, and patrolled, or supposed to be patrolled, by a third under contract, and the agreements and records that show who was responsible for what are exactly the documents an owner is slow to produce. Working out that structure early, and preserving the proof of it, is much of why these claims reward prompt, focused investigation rather than a wait-and-see approach.
When the setting is a bar, restaurant, or club, there can be an additional avenue. Massachusetts law makes it unlawful to serve alcohol to an intoxicated person under MGL c. 138, § 69, and an establishment that over-serves a patron who then injures someone can face liability for that separate failure. Negligent security and unlawful over-service are different theories, but they frequently appear together in the same incident, and a careful look at an assault in a drinking establishment considers both the security that was missing and the alcohol that should never have been served.
What a negligent security claim can recover is the full measure of the harm the attack caused, which matters enormously to someone living through the aftermath of violence. Beyond the medical bills, a claim can reach lost income, the cost of future care, and the pain, suffering, and lasting emotional trauma that an assault leaves behind, which is often the largest and most enduring part of the injury. The psychological toll of being attacked is real harm in the eyes of the law, and it weighs heavily in what such a claim is ultimately worth, not as an afterthought to the physical injuries but often as the center of them.
It is worth saying plainly that pursuing a property owner after an assault is not a stretch or a technicality; it is the law working as intended. Owners profit from inviting the public onto their property, and with that benefit comes a responsibility to take reasonable care of the people who come. That principle runs through the range of injury cases we handle, from slip-and-falls to inadequate security, and it rests on a single idea: the party in control of a space, and best positioned to make it safe, should bear the consequences when it unreasonably fails to. An assault is the most frightening version of that failure, but it is the same duty underneath.
As in any injury claim, expect the defense to look for a way to shift responsibility, sometimes onto the victim, by arguing that you provoked the confrontation or placed yourself in harm’s way. Under MGL c. 231, § 85, Massachusetts reduces a recovery by the injured person’s share of fault and bars it entirely past the halfway point, so these arguments carry real stakes and should be answered with the facts rather than accepted. Timing matters just as much: a negligent security claim generally must be brought within three years under MGL c. 260, § 2A, and the evidence these cases depend on, security-camera footage, incident reports, maintenance and complaint records, and witness accounts, disappears fast, so acting early is often what makes a claim provable at all.
If you are ever in this position, a few steps protect both your health and any claim. Get medical attention, including for injuries that are not visible, because the record matters and because the effects of an assault often surface later. Report the assault to the police, and ask whether the property itself created an incident report. If you can, note the security conditions while they are fresh, the broken lock, the dark lot, the absent guard, and identify witnesses and any cameras that may have captured what happened. And be cautious about giving statements to the property’s insurer or signing anything before you understand your rights, because those early conversations are designed to limit what the owner ultimately pays. None of this requires you to act like a litigant; it simply preserves the truth of what happened while it can still be proven.
If you or someone you love was assaulted on property that should have been kept safe, the Massachusetts assault and negligent security attorneys at Larson Law can investigate what the owner knew, move quickly to preserve the footage and records before they are gone, identify every party responsible for the conditions that allowed the attack, and pursue the full value of the harm, including the emotional injuries these cases so often involve. You can reach our team here or call 508-888-8888 to talk through what happened, at no cost. The person who attacked you bears the blame for what they did, but they are often not the only one responsible, and holding a property owner to the duty the law places on them is sometimes the only path to making an injured person whole. There is no cost to finding out whether a property owner failed you, and there is real value in asking early, while the cameras still hold the footage and the records still exist. No one should have to carry the financial weight of an assault alone, on top of everything else it already takes, and when an owner’s negligence helped make it possible, the law gives you a way to put that weight where it belongs. That is not about vengeance; it is about accountability, and for many people it is also the practical means of paying for the care, the lost time, and the support that recovery from a violent injury so often demands.
FAQs
Can I sue a property owner for an assault that happened on their property in Massachusetts?
Sometimes, yes. Under Massachusetts law, an owner owes lawful visitors reasonable care, which can include protecting them from foreseeable criminal acts. If an assault was foreseeable and the owner failed to provide reasonable security, the owner, and not only the attacker, may be liable for the resulting harm. Whether you have a claim depends on the facts of foreseeability and what security the situation reasonably required.
Does there have to be a prior crime at the same location for a negligent security claim?
No. In Mullins v. Pine Manor College, the Supreme Judicial Court rejected the rule that a prior, similar crime is required. Prior incidents are an important factor, but foreseeability is judged on all the circumstances, including the area, the type of property and business, warnings the owner received, and obvious security weaknesses. A claim can succeed without an identical earlier crime at the exact spot.
Who can be held responsible besides the attacker?
Depending on the situation, the property owner, a management company, a landlord, or the business operating on the premises may share responsibility for the conditions that allowed the attack. When the setting is a bar or club that over-served an intoxicated patron, the establishment may face additional liability under Massachusetts law. Identifying every responsible party is a central part of these cases.
What damages can I recover in a negligent security case?
A claim can seek the full measure of harm: medical expenses, lost income, future care, and the pain, suffering, and emotional trauma the assault caused. Because the psychological injury from a violent attack is often the most lasting harm, it frequently makes up a large part of the claim’s value rather than a minor addition to it.
How long do I have to file a negligent security claim in Massachusetts?
Generally three years from the date of the assault under MGL c. 260, § 2A. But the evidence these claims depend on, especially security-camera footage, is often erased within days or weeks, so it is wise to act quickly to preserve proof and protect the claim well before the deadline approaches.
Results Disclaimer: Past case results, settlements, and verdicts mentioned on this website do not guarantee or predict a similar outcome in any future case. Every case is unique and depends on its own facts and legal issues.