William Henderson claims the health system did not take appropriate steps to protect patients’ protected health information. In the complaint, Mr. Henderson is seeking to certify more plaintiffs into a class-action case.
In October, Kalispell Regional Healthcare notified patients that several employees had fallen victim to a phishing attack. Patient data that may have been affected includes names, addresses, medical record numbers, dates of birth, telephone numbers, email addresses, medical histories and treatment information, dates of services, treating and referring physicians, medical bill account numbers and health insurance information. Fewer than 250 patients may have had their Social Security numbers affected.
In the lawsuit, Mr. Henderson claims the breach was “caused by KRH’s failure to abide by best practices and industry standards. The lawsuit also claims the health system did not properly notify patients of the nature and extent of the data breach.
Since the incident, Kalispell Regional Healthcare has taken steps to ensure a similar incident does not happen again, including educating employees on identifying suspicious emails.
More articles on cybersecurity:
Michigan insurer alerts members of data breach
Sentara Hospitals agrees to $2.2M HIPAA settlement for incorrectly reporting data breach
16 cybersecurity incidents in November
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit
