The lawsuit was filed Jan. 19 by Kathleen Tucker, one of the patients whose information was affected. In the complaint, she alleged Memorial maintained patient data “in a reckless manner.”
On Aug. 15, a hacker group launched a ransomware attack that shut down Memorial’s IT systems, leading to canceled surgeries and diverted ambulances. The attack is linked to Hive, a ransomware group actively targeting hospitals.
In a Jan. 12 notice to patients, Memorial said the potentially affected information included patients’ names, dates of birth, medical record numbers, patient account numbers, Social Security numbers and other treatment and medical information.
The lawsuit stated website Bleeping Computer reported there is evidence suggesting databases containing Memorial patients’ data were exfiltrated during the attack.
“Memorial Health System denies the allegations and we will vigorously defend against these opportunistic lawsuits,” the health system said in statement emailed to Becker’s Feb. 1.
Read the full lawsuit here.
Note: This article was updated at 5:15 p.m. Central Standard Time Feb. 1 to include Memorial Health System’s comment.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.