Regulation agency Morgan & Morgan has lodged a class-action lawsuit in opposition to Tampa Basic Hospital on behalf of three victims affected by a big knowledge breach.
Between Might 12 and Might 30, 2023, cyber-criminals infiltrated Tampa Basic Hospital’s pc system, pilfering knowledge belonging to roughly 1.2 million sufferers.
The uncovered info encompasses delicate particulars like names, addresses, telephone numbers, dates of delivery, Social Safety numbers and choose Well being Insurance coverage Portability and Accountability Act (HIPAA)-protected medical information.
The plaintiffs contend that Tampa Basic Hospital not solely did not safe their private and medical knowledge adequately but in addition exacerbated the state of affairs by delaying the notification of victims till July 19—over two months after the preliminary breach.
The lawsuit asserts that the hospital was unaware of the breach till Might 31, giving hackers almost three weeks to extract info undetected.
Learn extra on the breach: Tampa Basic Hospital Information Breach Impacts 1.2 Million Sufferers
The three plaintiffs, who stays nameless to safeguard their identities, embody a person who has already fallen sufferer to identification theft following the breach and a retired FBI agent.
“Our purchasers’ allegations on this case paint an image of Tampa Basic Hospital’s cavalier angle towards cybersecurity and affected person privateness. This isn’t the primary time Tampa Basic Hospital has allegedly failed to guard its sufferers’ private knowledge – this knowledge breach follows a 2014 breach,” stated Morgan & Morgan attorneys John Morgan and Ryan McGee in an announcement despatched to Infosecurity through electronic mail.
“It’s our hope that this lawsuit is not going to solely safe justice and accountability for the sufferers whose privateness and peace of thoughts have been irrevocably violated, but in addition will spur Tampa Basic Hospital to take further steps to guard their sufferers’ privateness in a fashion applicable for the present local weather of cyber-attacks.”
The lawsuit contains allegations of invasion of privateness, unjust enrichment, breach of confidence and breach of fiduciary responsibility. Plaintiffs search aid within the type of damages, restitution, injunctive aid and the appointment of sophistication representatives.
Tampa Basic Hospital has been contacted by Infosecurity for remark.
