Azura Vascular Care Facing Class Action Over 2023 Data Breach Affecting 348K Individuals [UPDATE]

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action seeks to hold Azura Vascular Care responsible for a September 2023 data breach that reportedly exposed the private information of 348,000 individuals.

Did you receive a data breach letter from Azura Vascular Care? Let us know here.

The 74-page data breach lawsuit says Azura—which operates 70 vascular care and ambulatory surgery centers throughout the country—experienced a data security incident in which cybercriminals gained access to its network and exfiltrated patient and guarantor information around September 27 of last year.

According to an online notice posted by Azura, the cyberattack exposed patients’ names, Social Security numbers, mailing addresses, dates of birth, demographic and contact information, insurance policy and guarantor information, diagnosis and treatment details, and medical or billing records. The notice also relays that guarantors may have had their names, mailing addresses, phone numbers, dates of birth, Social Security numbers and email addresses compromised.

The case alleges that Azura’s deficient cybersecurity is to blame for the data breach, which the filing argues could have been prevented had the defendant properly encrypted files containing private data and monitored the computer network where they were housed.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

“Due to Azura’s inadequate security measures, [the plaintiff] and class members now face a present, immediate, and ongoing risk of fraud and identity theft and must deal with that threat forever,” the complaint contends.

Azura data breach victims are now forced to closely monitor their accounts and will likely pay out of pocket for credit monitoring, identity theft protection and other necessary services, the suit notes.

The filing claims the defendant’s online notice letter, which it published on January 12, 2024, omits “pertinent information” about the incident, including how cybercriminals were able to infiltrate its systems, how it determined that private data had been accessed and what steps it’s taking to secure its network from future attacks.

Per the case, the notice also fails to explain why Azura waited two months after confirming which files had been affected in November 2023 to disclose the incident to impacted individuals.

“Azura’s failure to timely notify the victims of its data breach meant that [the plaintiff] and class members were unable to immediately take affirmative measures to prevent or mitigate the resulting harm,” the complaint says.

The lawsuit looks to represent anyone in the United States whose personal information was compromised in the data breach disclosed by Azura Vascular Care on or about January 12, 2024.

Did you receive a data breach letter from Azura Vascular Care? Let us know here.