Chief Administrative Law Judge D. Michael Chappell in November dismissed a lawsuit the FTC filed against LabMD alleging the company failed to reasonably protect the security of consumers’ personal data. The FTC provided various incidents in which personal information held by LabMD was made publicly available, including one instance where insurance files were available to share on file sharing site LimeWire.
The FTC overruled Judge Chappell’s decision in a unanimous decision, indicating the judge applied the wrong legal standard. “LabMD’s security practices were unreasonable, lacking even basic precautions to protect the sensitive consumer information maintained on its computer system,” FTC Chairwoman Edith Ramirez wrote in FTC’s opinion, according to Reuters.
The opinion said personal information of 9,300 consumers was exposed online for 11 months. LabMD “failed to use an intrusion detection system or file integrity monitoring; neglected to monitor traffic coming across its firewalls; provided essentially no data security training to its employees; and never deleted any of the consumer data it had collected,” the opinion indicates.
More articles on data breaches:
Athens Orthopedic Clinic reports data breach
Danish authorities report nationwide breach of health information
Maryland court dismisses CareFirst data breach lawsuit citing insufficient demonstration of injury
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit
