The ruling overturned a verdict from the Georgia Court of Appeals that decided to throw out the case. The supreme court found that the 200,000 patients continue to face harm from the data breach.
In 2016, a cybercriminal group, known as the Dark Overlord, encrypted the computers at Athens Orthopedic Clinic. To unlock its systems, the hospital decided to pay the ransom. Patients were notified of the incident in August 2016.
Patients argue that the ransomware attack exposed their protected health information. One patient claimed that her information has been misused since the attack.
Attorneys for Athens Orthopedic Clinic and the plaintiffs did not respond to requests for comment from The Atlanta Journal-Constitution.
More articles on cybersecurity:
Florida clinic to pay $85K for violating HIPAA records access rule
Wyoming hospitals hit by cyberattacks almost daily, state hospital association says
4 things to know about Zeppelin, a ransomware targeting healthcare organizations
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
