The lawsuit alleges that the health center was negligent in protecting patients’ health information stored on its systems, in violation of the HIPAA Security Rule.
The lawsuit also alleges that Lamoille Health Partners failed to notify patients about the hack and what kind of information was breached.
Lamoille Health Partners first detected the breach on June 13.
An investigation later revealed that an unauthorized user breached its system, potentially gaining access to patient information such as names, addresses, dates of birth, Social Security numbers, health insurance information and medical treatment information.
In July, the health center told WCAX News that it wasn’t informing patients because it didn’t have much information and that it was working with the FBI to figure it out.
The health center released a notice to patients on Aug. 11.
The lawsuit says approximately 60,000 patients were affected.
The plaintiffs are seeking compensatory damages and are requesting Lamoille Health Partners improve its security systems.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
