Patient Dennis Ross filed the proposed class-action complaint June 26 in U.S. District Court for the Eastern District of Pennsylvania, claiming the health system showed a “reckless disregard” for data security and “breached their duty” to protect patients’ personal and health information, including under HIPAA. The plaintiff seeks damages and injunctive relief.
The 78-hospital system has estimated that about 1 million of its patients were affected by the data breach, which stemmed from the GoAnywhere file transfer software from third-party vendor Fortra. Clop, a ransomware gang with ties to Russia, has claimed responsibility for the hack.
Community Health Systems was hit in May with a similar lawsuit filed in federal court in Tennessee. The health system didn’t respond to a request from Becker’s for comment.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.