The lawsuit was filed April 11 in the U.S. District Court in Springfield, Mass.
In the complaint, one patient claims she is now at a higher risk for identity theft and other cybercrime due to the breach, Masslive.com reports.
Baystate Health alerted patients on April 8 of a February phishing attack. In the notice to patients, the hospital said it had learned an unauthorized third-party gained access to an employee’s email account through a phishing attack.
Upon further investigation, Baystate Health discovered nine employee email accounts had been compromised from the cyberattack. Patients’ names, dates of birth and health information were affected by the phishing attack. A limited number of Social Security numbers, Medicare numbers and some health insurance information may have been affected.
Since the phishing attack, Baystate Health has offered patients credit monitoring and identity protection services for those whose Social Security numbers were affected.
More articles on cybersecurity:
Washington State University settles $5.26M data breach class-action suit
HHS continues to deploy strong cybersecurity solutions, report finds
Rehab center data breach exposes millions of patient records
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.