In October, the health system began notifying 130,000 patients that their information may have been exposed due to a phishing attack. Fewer than 250 patients may have had their Social Security numbers affected.
Since the attack, patients have come forward claiming that their information has been misused. In the latest lawsuit, patients want to certify a class of all patients whose information was affected. In November, one of the 130,000 affected patients filed a lawsuit that alleged the health system did not take appropriate steps to protect patients’ protected health information.
“KRH recently became aware of a lawsuit related to the data security event announced in October. We have not had the opportunity to thoroughly review the complaint and are not prepared to comment on its allegations,” a spokesperson for Kalispell Regional Health told the Missoulian.
More articles on cybersecurity:
Florida clinic to pay $85K for violating HIPAA records access rule
Wyoming hospitals hit by cyberattacks almost daily, state hospital association says
4 things to know about Zeppelin, a ransomware targeting healthcare organizations
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
