While the company has said that no Social Security numbers were disclosed in the breach, a lawyer for the plaintiffs claims that identity theft has already taken placed as a result of the attack. The class action suit alleges that the company did little to ensure its member data was protected after becoming aware of cybersecurity weaknesses in 2014.
The compromised data includes names, birthdays, email addresses and insurance identification numbers.
More articles on health IT:
More than $31B distributed in MU payments to date
10 highest-funded digital health startups
13 recent health IT tips from vendors, CIOs
