If you were attacked at a business in California, you may have a claim against the person who hurt you and a separate claim against the business itself. They are not the same case. The claim against the attacker is usually worthless in practice, because most people who assault a stranger in a parking lot have no insurance and no assets. The claim that matters is against the business, and it exists only when the business did something wrong: its employee committed the assault, its security staff used excessive force, or it knew or should have known that violence was likely on its property and failed to take reasonable steps to prevent it.
Then there is the piece of this that decides more cases than any legal argument. Surveillance footage at most businesses is overwritten automatically, often within seven to thirty days. In the files we see, the single most common reason a strong case becomes a difficult one is that nobody asked for the video until six weeks later, by which point the business is free to say, truthfully, that the system recorded over it. A written preservation demand in the first days is worth more than anything else you can do.
Assault, battery, and why the labels matter less than you think
In California, assault is conduct that creates a reasonable apprehension of imminent harmful contact. Battery is the harmful or offensive contact itself. A security guard who rushes at you with a raised arm has committed an assault; the shove that follows is a battery. Most real incidents involve both, and they are pleaded together.
What actually changes the value of the case is not the label on the intentional tort. It is whether the business is legally responsible for what happened, because the business is the party with insurance. There are three main ways that responsibility attaches.
The attacker was an employee
If a bartender, a store manager, a maintenance worker or a hired security guard assaulted you, the business may be liable under respondeat superior for conduct within the scope of employment. California courts read that scope more broadly than people expect in this context: a dispute that arises out of the job itself, such as a guard removing a patron, a cashier confronting a suspected shoplifter or an employee reacting to a customer complaint, is generally within the scope even when the employee’s conduct was a serious overreaction. A purely personal grievance unrelated to the work is a different matter.
Security contractors add a layer. Many businesses hire an outside guard company, and the contract between them usually contains indemnity provisions that determine who pays in the end. Both the business and the guard company are typically proper defendants, and both usually carry coverage.
The business failed to provide reasonable security
This is the negligent security claim, and it is the one most people are actually bringing. It rests on ordinary premises liability. Under Rowland v. Christian (1968), a property owner owes a duty of ordinary care in the management of property, and the analysis turns on foreseeability along with the burden of the precaution that is said to have been missing.
California courts calibrate those two against each other. Where the harm was highly foreseeable, a court may require substantial measures, including guards. Where it was not, requiring an expensive security program would impose a burden out of proportion to the risk, and the claim fails on duty. Foreseeability is not established by saying that crime happens in cities. It is established with specifics: prior violent incidents at that location, calls for service to that address, complaints from tenants or customers, incident reports the business generated itself, and conditions the business created, such as a lot with broken lighting or a propped open gate.
The business knew about a specific danger and did nothing
The clearest cases are the ones where the business had actual notice. A patron was ejected earlier that night for threatening people and was let back in. A tenant reported an intruder in the parking structure three times. Employees had complained for months that the back door lock was broken. A business that receives that kind of warning and does nothing is in a very different position than one facing a first, unpredictable act.
Where these cases actually come from
Certain settings generate most of them, and each has its own evidence:
- Bars and nightclubs. Over service of alcohol, doors staffed by undertrained guards, and removals that turn physical. Incident logs and the door staff’s own reports matter, as does whether the venue met the training requirements applicable to licensed security personnel.
- Apartment complexes and parking structures. Broken gates, failed exterior lighting, non functioning locks, and tenant complaints that were ignored. These are frequently the strongest claims because the complaint history is in writing. We handle these as apartment complex injury claims.
- Hotels and short term rentals. Key control, hallway cameras, guest room door hardware, and how the front desk responded to a reported problem. Innkeepers have long carried heightened duties toward guests. Our practice covers hotel injury claims of this kind.
- Retail stores and gas stations. Loss prevention staff who detain customers, late night stations with no visibility, and lots that have generated repeated police calls.
- Restaurants and fast food. Employee altercations with customers, and drive through and parking lot incidents after closing.
What to do in the first two weeks
- Get medical care immediately and describe what happened accurately. Say you were assaulted and where. The medical record’s description of mechanism becomes the earliest independent account of the incident, and a defense lawyer will read it closely later.
- Report it to police and get the report number. A criminal case is separate from your civil claim, and it can proceed even if you are not sure you want to sue. The report preserves the date, the location and the parties.
- Report it to the business in writing and ask for an incident report. Most businesses generate one internally. Ask for a copy. If they refuse, you have still documented that you asked.
- Demand that the video be preserved, in writing, immediately. Name the date, the time range, and every camera angle including exterior and parking areas. Send it by email so there is a timestamp. This is the step people skip and it is the one that matters most.
- Collect witnesses now. Other patrons scatter and become unreachable within days. A phone number written on a napkin is worth more than a perfect memory a year later.
- Photograph the scene, including what was not working. Dark corners, a broken gate, a camera housing with no camera in it, a propped door. Businesses repair these things quickly once a lawyer appears.
- Do not give a recorded statement to the business’s insurer before you understand your claim. You are not required to, and the questions are designed around defenses you have not heard yet.
What can be recovered, and what limits it
The recoverable losses are the same as in any injury case: medical expenses past and future, lost income and lost earning capacity, and non-economic damages for pain, physical impairment and emotional harm. Assault cases carry a heavier psychological component than most premises cases, and treatment for anxiety, sleep disruption or post traumatic symptoms is both genuine and provable when a person actually goes and gets it. Head injuries from being struck or from falling are common here and are frequently missed at the emergency room; if there was any loss of consciousness or persistent confusion, see a physician and consider what we describe in our work on brain injury claims.
Two things limit these cases. California uses pure comparative negligence, so if a jury finds you contributed to the altercation, your recovery is reduced by your share rather than eliminated. And in a claim based only on inadequate security, the business’s fault will be compared to the attacker’s, which is a real issue at trial and a reason foreseeability evidence has to be strong.
The deadline is two years from the date of injury under Code of Civil Procedure 335.1. If the property belongs to a public entity, such as a city owned garage or a transit facility, a written government claim is generally due within six months under Government Code 911.2. There is also the California Victim Compensation Board, a state program that can reimburse certain crime related expenses for victims who report to law enforcement and apply on time, and it operates independently of any civil claim.
How these files get built
The work in a negligent security case is investigative. We send preservation letters the day we are retained, request calls for service records for the address, look for prior incidents at the same location, obtain the security contract and post orders that told the guards what they were supposed to do, and take the deposition of the manager who was on shift. The question is always the same one that runs through premises law and through our slip and fall practice: what did this business know, when did it know it, and what would a reasonable operator have done about it.
Our office is in Chatsworth and we handle these matters personally throughout Los Angeles and the rest of California. You can read more about the firm.
Key points
- The claim worth pursuing is usually against the business, not the person who attacked you.
- A business can be liable when its employee committed the assault, when its guards used excessive force, or when it failed to take reasonable security measures against foreseeable violence.
- Foreseeability is proved with prior incidents, police calls to the address and written complaints, not with general crime statistics.
- Surveillance video is often overwritten within seven to thirty days, so a written preservation demand comes first.
- Damages include medical care, lost income and non-economic harm, reduced by any comparative fault.
- Two years to sue under Code of Civil Procedure 335.1, and only six months to present a claim if the property is publicly owned.
Frequently asked questions
Can I sue a business if another customer attacked me?
Sometimes. The business is not automatically responsible for what a stranger did, but it can be liable if the violence was foreseeable and it failed to take reasonable precautions, or if its staff had warning and did nothing. Evidence of prior incidents at that location, ignored complaints or a security failure the business created is what makes this claim work.
The police are prosecuting the person who hit me. Do I still need a civil case?
Yes, if you want to be compensated. A criminal case punishes the offender and may order restitution, but it does not resolve your medical bills, lost income or non-economic damages, and it does not involve the business at all. The two proceed on separate tracks and a conviction can help your civil case.
How do I get the security footage?
Ask for it in writing immediately, identifying the date, the time window and the camera locations, and keep a copy of the request. Many businesses will not release footage to an individual and will only produce it in response to a lawyer’s demand or a subpoena. Because retention periods are short, the request has to go out before you have decided whether to file anything.
What if I had been drinking when it happened?
It matters less than people fear. California’s comparative fault rule reduces recovery by your share of responsibility rather than barring the claim, and intoxication alone does not make you responsible for being assaulted. In venues that serve alcohol, over service by the business is often part of the story rather than a defense to it.
If you were hurt at a business and are not sure whether anyone besides your attacker is responsible, the sooner someone looks at the video and the incident history, the more likely those things still exist. You can contact the firm any time. Consultations are free, and there is no fee unless we recover for you. Call (818) 818-5031.




