The judge ruled that the lawsuit was directed toward the wrong entity, Allscripts Healthcare Solutions Inc., which serves as the parent company of Allscripts Healthcare Solutions LLC. According to the judge, Allscripts’ LLC is responsible for the company’s cybersecurity and privacy measures, not the parent company.
Surfside Non-Surgical Orthopedics in Boynton Beach, Fla., filed the class-action lawsuit against Allscripts in January 2018, shortly after the EHR vendor was hit with ransomware as part of the SamSam cyberattack earlier that month. The SamSam ransomware infiltrated Allscripts’ data centers in Raleigh and Charlotte, N.C., which left almost 1,500 of its clients without access to their EHRs. Some customers regained EHR access hours after the attack, while others were still unable to access electronic patient data one-week post-attack.
The lawsuit sought class-action status for Allscripts customers that were affected by the EHR downtime after the attack. Additionally, the plaintiffs were also pursuing damages related to disruption of business and lost revenue.
Editor’s note: Becker’s Hospital Review reached out to Allscripts for comment and will update the report as more information becomes available.
More articles on EHRs:
16 hospitals, health systems seeking Allscripts, Cerner, Epic, Meditech talent
Cerner defends progress on EHR interoperability between VA, DOD
Williamson Memorial Hospital selects Meditech EHR: 3 notes
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.