A class action data breach lawsuit has been filed against CommonSpirit Health for failure to properly secure and safeguard their patients’ protected health information and personally identifiable information stored within the company’s information network. This information includes full names, addresses, healthcare providers, medical record numbers, treatment/prescription information, dates of medical services, other health insurance information, and patient’s facility/account numbers.
According to an article published on Fierce Healthcare, “Over 100 current and former CommonSpirit facilities located in 13 states may have been touched by the attack,” a notable increase from the initial statement that only 3 states were affected by the breach.
“Potentially affected facilities reach across the country with 21 organizations in Texas, 14 in Nebraska, 14 in North Dakota, 13 in Kentucky, 10 in Washington state, six in Arkansas, six in Minnesota, five in Tennessee, five in Ohio, four in Oregon, three in Georgia, three in Iowa and one in Pennsylvania.”
Class Action Data Breach Business Obligations
Businesses have an obligation to their customers to protect their data and inform them if something happens to them. Most companies will usually offer privacy and data breach victims free credit or identity monitoring for a year or two. In some cases, this is enough. But if a business loses customer data in a cyberattack and further investigation reveals it was because of poor cybersecurity systems, it could potentially be sued in a class action lawsuit.
Advice From Emery | Reddy
As featured on KIRO News Seattle, Emery | Reddy, PLLC attorney Timothy Emery was quoted as saying ‘“Protecting yourself or your children can be a moot point since most of our private info is already compromised.” and that “It’s an arms race between cyber criminals and companies.”’
“The attorney knows cyber criminals are in it for the money, but he believes companies should spend more on cyber security. He also says a nationwide cyber security standard is needed, whether it’s state or federal law.”
‘“The evidence is there are a lot of companies that just won’t invest in the protections against cyber criminals,” Emery said.’
Learn more about how you can protect yourself against cybercrimes from KIRO 7 News Seattle.
Know Your Rights With An Experienced Data Breach Lawyer
Data breach victims may be able to receive compensation through a class action lawsuit. This could include additional years of credit and identity monitoring, reimbursement for losses due to fraud related to the breach, compensation for time spent dealing with the breach, attorneys’ fees, or nominal damages.
If you think that your information has been compromised due to this data breach, contact the legal team at Emery | Reddy. You may have a case! Call us today!