In March 2014, UPMC reported 322 employees’ tax information had been stolen, a number they later revised to 27,000 employees. A class-action lawsuit was filed in the Allegheny County Court of Common Pleas, alleging the health system failed to adequately protect employee information and also did not disclose the breach in a timely manner.
In his opinion, Common Pleas Judge R. Stanton Wettick wrote UPMC itself was also a victim of the cyberattack and an improved cybersecurity system may not have prevented the breach, according to the report.
More articles on data breaches:
Healthcare now spending billions to defend the IT systems it spent billions to install
Data breaches now cost an average of $3.8M each: 6 things to know
800 patients’ records compromised at Jefferson Hospital: 4 things to know
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.