Change Healthcare is seeking to dismiss a consolidated lawsuit stemming from its Feb. 21 ransomware attack, arguing the U.S. District Court for the District of Minnesota lacks jurisdiction over most of the claims.
The cyberattack, linked to the ALPHV/BlackCat ransomware group, severely disrupted healthcare payment processing nationwide and exposed sensitive patient and provider data. The breach led to multiple lawsuits from affected individuals and organizations, which were later consolidated into a multidistrict litigation in Minnesota.
In a memorandum filed March 21, Change Healthcare argued the court does not have general jurisdiction because the company is not based in Minnesota. It also contended that claims from plaintiffs outside the state should not be heard due to a lack of specific jurisdiction.
The company said plaintiffs are misusing the multidistrict litigation process by attempting to file all claims directly in the district, which it argues violates prior court rulings and federal law. As a result, Change Healthcare is asking the court to dismiss the case.
The court has not yet ruled on the motion.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.