Class action lawsuit filed over hospital data breach

November 14, 2014 by

Data SecurityFive patients from Alabama have filed a federal class action lawsuit against a Tennessee-based hospital system after 4.5 million people across the U.S. were affected by a data breach.

In August, Community Health Systems disclosed that its computer system had been cyber-attacked in April and June.

The breach, which affected 206 hospitals in 29 states, involved non-medical personal information such as names, addresses, birth dates, telephone numbers and social security numbers.

The lawsuit was filed Aug. 21 in the Northern District of Alabama on behalf of five Alabama residents who were treated at Riverview Regional Medical Center, Gadsden Regional Medical Center, South Baldwin Regional Medical Center and Stringfellow Memorial Hospital.

The class action suit claims that the plaintiffs’ information was compromised because the hospital system failed “to implement and follow basic security procedures.” Hospital officials allegedly did not adequately protect or encrypt patients’ sensitive information.

The complaint also claims that Community Health Systems and its hospitals did not promptly notify patients who were affected by the breach.

The suit alleges breach of contract, breach of implied contract, breach of implied covenant of good faith and fair dealing, unjust enrichment, money had and received, negligence, negligence per se, wantonness, invasion of privacy, and violations of the Fair Credit Reporting Act.

According to a company filing with the Securities and Exchange Commission, the cybersecurity firm Manndiant believes the attacker was an “Advanced Persistent Threat” group from China.  According to the SEC filing, Community Health Systems “is providing appropriate notification to affected patients and regulatory agencies…The company will also be offering identity theft protection services to individuals affected by this attack.”

Steve Larson
An experienced trial lawyer who handles both hourly and contingent fee cases, Steve has expertise in class actions, consumer cases, antitrust litigation, securities litigation, corporate disputes, intellectual property disputes, unfair competition claims, employment matters, and disputes involving family wealth. Steve regularly represents individuals and businesses in federal and state court and has obtained class-wide recovery in multiple class actions. A veteran practitioner, Steve's clients value his creative approach to resolving complex litigation matters.

Legal Disclaimer

The information contained in this blog does not constitute legal advice, and does not create an attorney-client relationship. We make no claims, promises or guarantees about the accuracy, completeness, or adequacy of the information contained in or linked to this blog.