Change Healthcare seeks to dismiss consolidated ransomware lawsuit

Advertisement

Change Healthcare is seeking to dismiss a consolidated lawsuit stemming from its Feb. 21 ransomware attack, arguing the U.S. District Court for the District of Minnesota lacks jurisdiction over most of the claims.

The cyberattack, linked to the ALPHV/BlackCat ransomware group, severely disrupted healthcare payment processing nationwide and exposed sensitive patient and provider data. The breach led to multiple lawsuits from affected individuals and organizations, which were later consolidated into a multidistrict litigation in Minnesota.

In a memorandum filed March 21, Change Healthcare argued the court does not have general jurisdiction because the company is not based in Minnesota. It also contended that claims from plaintiffs outside the state should not be heard due to a lack of specific jurisdiction.

The company said plaintiffs are misusing the multidistrict litigation process by attempting to file all claims directly in the district, which it argues violates prior court rulings and federal law. As a result, Change Healthcare is asking the court to dismiss the case.

The court has not yet ruled on the motion.

Advertisement

Next Up in Cybersecurity

Advertisement