James Wierbowski, a former Geisinger patient, filed the lawsuit June 28, and is seeking “appropriate monetary relief,” which could equal more than $5 million.
The lawsuit alleges Geisinger and Microsoft’s Nuance failed to keep patient data secure after a former Nuance employee wrongly accessed personal health information of Geisinger patients. The lawsuit alleges Nuance failed to revoke the employee’s access to its systems after the employee was terminated, which led to the breach last November. Geisinger identified the breach and notified Nuance shortly after the inappropriate access occurred. Nuance then removed the former employee’s access.
The former employee was arrested on criminal charges. Law enforcement officials found a thumb drive in the former employee’s car with information from his former employer, according to the lawsuit.
The health system began notifying more than 1 million patients last week of the breach. Geisinger delayed notifying patients at the request of law enforcement to avoid disrupting their investigation into the incident, according to the report.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.