Amazon One Medical is facing a proposed class-action lawsuit in federal court following a data breach that exposed patient records at its senior care unit.
The lawsuit, filed June 19 in the U.S. District Court for the Northern District of California, names 1Life Healthcare, Inc., which does business as One Medical, as the defendant. Two Colorado residents who were former patients of One Medical Senior Health, formerly known as Iora Health, filed the complaint.
One Medical disclosed June 17 that it learned on June 13 of unauthorized access to a third-party file storage system used to retain archived information from Iora Health, which it acquired in 2021. The potentially compromised information includes demographic and clinical records for some patients at designated One Medical Seniors clinics in Atlanta; Cape Cod, Mass.; Charlotte, N.C.; the Piedmont Triad region of North Carolina; Denver; Houston; Phoenix; Tucson, Ariz.; and Seattle.
A digital extortion group known as ShinyHunters has claimed responsibility for the breach, alleging it stole 8.8 terabytes of data and threatening to release it publicly.
The plaintiffs allege One Medical failed to adequately protect patient data, including by not encrypting archived records, failing to implement multi-factor authentication and not properly overseeing third-party vendors. The lawsuit seeks damages and a court order requiring the company to strengthen its security practices.
Five additional lawsuits raising similar claims have since been filed in the same court. Plaintiffs in all six cases have asked the court to assign them to a single judge. Becker’s reviewed the court documents.
When asked about the lawsuit, a One Medical spokesperson referred Becker’s to the company’s previously issued statement and security event notice.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
