A woman is leaving a big-box retail store at nine at night. She walks to her car in a poorly lit corner of the parking lot. The store has one security guard who stays inside the entrance. No one patrols the lot. Two men approach her from between parked cars, demand her purse, and when she hesitates, they knock her to the ground. She breaks her wrist and suffers a concussion. Her injuries are real. Her medical bills are real. The question is whether the store is legally responsible for them.
Under premises liability law, property owners and businesses have a duty to keep their premises reasonably safe for people who are legally on the property. When the property is open to the public—like a retail store—that duty includes taking reasonable steps to protect customers from foreseeable criminal acts by third parties. This is not about guaranteeing that no crime will ever happen. It is about doing what a prudent business would do under the same circumstances to reduce an identifiable risk.
Parking lots are high-risk areas for theft, assault, and carjackings. They are large, open spaces with limited natural surveillance, especially after dark. Criminals target them because they offer easy escape routes and multiple hiding spots between vehicles. A store that knows its lot has been the site of multiple muggings or car break-ins over the past year cannot ignore that pattern. That knowledge makes future attacks foreseeable. And once criminal conduct is foreseeable, the store must act.
What counts as a reasonable security measure depends on the specific situation. A store in a low-crime suburb with a well-lit lot and few incidents might be fine with a single security camera and an employee walking customers to their cars on request. But a store in a high-crime urban area with a history of parking lot robberies may need regularly scheduled patrols, bright lighting in every corner, visible security cameras, and perhaps a dedicated guard who walks the lot during peak evening hours. The law does not prescribe a checklist. It asks whether the store’s actions—or lack of action—fell below what a reasonable store would have done given the known risks.
The woman in the example has a strong case if she can show that the store knew about prior similar crimes in its parking lot. Police reports, incident logs from the store’s own security, or complaints from customers are all evidence of that knowledge. She also needs to prove that the store’s failure to provide adequate security directly caused her injury. If a guard patrolling the lot would likely have deterred the attackers or interrupted the assault, the store’s negligence—not just the criminals’ actions—is a legal cause of her harm.
Defenses exist. The store might argue that the attack was sudden and unpredictable, that it had no history of such crimes, or that the woman failed to take reasonable precautions for her own safety, such as walking to her car alone at night in a deserted part of the lot. But courts generally do not let businesses off the hook just because a customer could have done something differently. The store’s primary duty is to maintain a safe environment, not to shift that burden onto the customer.
The practical takeaway is straightforward. If you own or manage a retail store, you need to assess the actual crime risks in and around your parking lot. Look at police data. Talk to local law enforcement. Keep records of every incident on your property. If you see a pattern, you cannot pretend it does not exist. Hire security. Improve lighting. Install cameras. Post signage that alerts customers to safety measures. Doing nothing is not a defense. It is negligence waiting to happen.
For customers, the lesson is that you have legal rights when a business fails to protect you from foreseeable harm. If you are injured in a parking lot because the store cut corners on security, you can hold them accountable. The law expects property owners to take real steps to prevent injury, not just to offer sympathy after it happens.
