The suit, filed Jan. 2 in the U.S. District Court for the District of Massachusetts, alleges the healthcare organizations failed to implement sufficient security measures to safeguard sensitive data, including Social Security numbers, medical histories and insurance details. The compromised information has reportedly surfaced on the dark web.
The breach occurred Dec. 24, 2023, when Anna Jaques Hospital was targeted by the Money Message ransomware group. The gang claimed responsibility for stealing 600GB of data, including files tied to the hospital and Beth Israel Lahey Health.
The plaintiffs, according to the lawsuit obtained by Becker’s, are seeking damages and court-ordered actions to bolster data security measures and ensure lifetime identity theft protection for those affected by the breach.
Becker’s reached out to Beth Israel Lahey Health for comment and will update the story if more information is learned.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.