Class Action Says M&D Capital Premier Billing Failed to Protect Private Data from Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action accuses M&D Capital Premier Billing LLC and affiliate BL Pain Management, PLLC of failing to protect consumers’ private data during a targeted cyberattack announced in March 2024.

Did you receive a data breach letter from M&D Capital Premier Billing? Let us know here.

The 47-page data breach lawsuit alleges that negligent cybersecurity on the part of M&D—which provides billing services to healthcare providers—allowed an unauthorized third party to gain access to its computer network in late June 2023.

Per the suit, the incident potentially exposed individuals’ names, addresses, dates of birth, Social Security numbers, medical billing and insurance information, financial information, medical diagnoses, and treatment and medication details.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The case contends that the defendants failed to follow “basic” cybersecurity protocols to safeguard the personal data in their care and did not adequately monitor the computer systems for unauthorized activity.

“Had they properly monitored their property, they would have discovered the intrusion sooner rather than allowing cybercriminals a period of unimpeded access to the Private Information of [the plaintiff] and Class Members,” the complaint charges.

As a result of the companies’ alleged negligence, data breach victims now face an increased risk of identity theft, fraud and other illegal schemes at the hands of cyberthieves, the filing argues.

What’s more, the defendants waited until March 2024 to notify impacted individuals about the incident, which only caused additional harm, the suit claims.

“In a data breach, time is of the essence to reduce the imminent misuse of Private Information,” the case relays. “Early notification helps a victim of a Data Breach mitigate their injuries, and in the converse, delayed notification causes more harm and increases the risk of identity theft.”

The lawsuit looks to represent anyone in the United States whose private information was compromised in the M&D data breach.

Did you receive a data breach letter from M&D Capital Premier Billing? Let us know here.