PIH Health Data Breach
Last Updated on January 13, 2025
At A Glance
- What's Going On?
- Attorneys need to hear from PIH Health patients as they investigate whether a class action lawsuit can be filed over a December 2024 ransomware attack.
- Does This Cost Anything?
- It costs nothing to get in touch or to talk to someone about your rights.
- What Can I Get?
- If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the incident.
PIH Health Data Breach?:
Lawsuit Investigation
Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the PIH Health cyberattack.
As part of their investigation, they need to hear from current or former patients of PIH Health.
On December 1, 2024, Southern California regional healthcare network PIH Health experienced a ransomware attack that compromised its computer and phone systems across multiple locations, including PIH Health Downey Hospital, PIH Health Good Samaritan Hospital, PIH Health Whittier Hospital, urgent care centers, doctor’s offices, and home health and hospice services. The attack caused system-wide outages, disrupting access to patient health records, laboratory systems, pharmacy, radiology, and patient registration tools. Internet access and most phone systems were also disrupted.
Hackers claimed to have accessed and stolen two terabytes of data, including 17 million patient records and highly sensitive personal, medical, and organizational information.
The data allegedly stolen includes:
- Patient Information:
- Data for over 8.1 million medical episodes
- Home addresses, phone numbers, places of employment, and medical expenses
- Confidential diagnoses, test results, treatment details, patient photos, and scans
- Private emails between patients and PIH about treatments and test results
- Organizational and Confidential Data:
- Monthly oncology reports and profitability details
- About 100 active nondisclosure agreements with medical organizations
- Confidentiality agreements with employees
PIH Health posted FAQs on its website regarding the ransomware attack.
If you believe your information may have been exposed in the breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.
A successful case could also force PIH Health to ensure it takes proper steps to protect the information it was entrusted with.
Before commenting, please review our comment policy.
Featured In:
Who Is ClassAction.org?
ClassAction.org is a group of online professionals who are committed to exposing corporate wrongdoing and giving consumers the tools they need to fight back.
We've been reporting on the legal space for nearly a decade and have built relationships with class action and mass tort attorneys across the country.
