Health Insurance Portability and Accountability Act

September 15, 2025 WebTPA and several health insurers have agreed to pay $13.75M to settle class action litigation over an April 2023 data breach.

June 1, 2023 A class action alleges Monument has illegally disclosed users’ information to third-party advertisers, including Meta, Google, Bing and Pinterest.

March 23, 2023 Independent Living Systems faces another class action lawsuit that claims the health services company failed to protect current and former patients’ personal information from a “foreseeable” data breach in July 2022.

March 23, 2023 A class action lawsuit alleges Independent Living Systems recklessly and/or negligently failed to protect itself from a data breach that compromised the personal information of over four million people.

February 14, 2023 A class action lawsuit claims Mindpath Health failed to protect patient information from hackers who reportedly gained unauthorized access to two employee email accounts in 2022.

February 10, 2023 A class action lawsuit claims Howard Memorial Hospital’s “negligent” and “careless” cybersecurity standards are to blame for a data breach reportedly discovered in December 2022.

January 31, 2023 Bay Bridge Administrators, LLC (BBA) faces a class action lawsuit that claims a data breach reportedly discovered in September 2022 was a direct result of the company’s allegedly deficient cybersecurity system.

January 26, 2023 A class action lawsuit accuses Coastal Cardiology P.C. of failing to properly protect the personal information of 71,227 patients from a “foreseeable” cyberattack reportedly discovered in mid-August 2022.

January 18, 2023 A class action lawsuit accuses CommonSpirit Health of failing to protect patients’ personal information from a data breach that occurred between September and October 2022.

January 9, 2023 Gateway Rehab faces a class action that claims the medical center failed to protect patients’ personal health information from a data breach in June 2022.

September 21, 2021 A class action has been filed over an alleged UC San Diego Health data breach in which hackers reportedly gained unauthorized access to employees’ email accounts.

September 1, 2021 Northeast Radiology and Alliance HealthCare face claims that they failed to protect patients’ sensitive personal and medical information from unauthorized access.

June 7, 2021 The failure of CaptureRx and Midtown Health Center to safeguard patients’ private information is to blame for a February 2021 data breach, a class action says.

October 6, 2020 A lawsuit claims Healthalliance Hospital and Ciox Health “failed and refused” to provide requested electronic medical records while charging excessive fees.

September 16, 2020 Assured Imaging faces a class action over a May 2020 ransomware attack in which patients' private medical and personal information was reportedly compromised.

May 29, 2020 NCH Healthcare System, Inc. has been hit with a class action over a data breach that reportedly exposed the personal and medical information of over 63,000 patients.

May 22, 2020 Gilead Sciences unlawfully disclosed confidential medical information by sending envelopes labeled "HIV Prevention Team," a class action claims.

March 11, 2020 Sunshine Behavioral Health faces a proposed class action over a data breach that allegedly allowed patients' information to be accessed via internet search engines.

February 24, 2020 A class action suit claims Prisma Health-Midlands failed to adequately safeguard patients’ private health information and provide prompt notice following a data breach.

February 12, 2020 The operators of Pavia Hospital Santurce and Pavia Hospital Hato Rey are facing a lawsuit over a data breach that the plaintiffs claim was caused by the companies’ negligence in securing patient information.