CompleteCare Health Network Hit with Class Action Over Cyberattack Announced in December 2023

New to ClassAction.org? Read our Newswire Disclaimer

CompleteCare Health Network (CCHN) faces a proposed class action over a cyberattack discovered in October 2023 that compromised patients’ personal and medical data.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

According to a December 2023 notice letter sent to victims, the New Jersey-based medical system detected on October 12 that an unauthorized third party had gained access to parts of its computer network. Per the notice, a subsequent investigation concluded that as a result of the incident, the threat actor may have acquired certain patient data stored in CCHN’s system, including individuals’ names, phone numbers, addresses, Social Security numbers and medical-related information.

The 46-page lawsuit claims negligence on the part of CCHN is to blame for the data breach, alleging that the health network failed to implement cybersecurity protocols necessary to properly protect the information in its care. The suit adds that the defendant could have prevented the ransomware attack entirely by adequately encrypting its servers and the confidential data stored therein.

The case takes further issue with CCHN’s notification of data breach victims. Although the defendant purports to have detected the incident in mid-October 2023, it waited until December to distribute notice letters to impacted individuals, the complaint charges.

What’s more, the notice lacked details about how the cyberattack occurred, where the stolen data exists today and what steps have been taken to prevent future breaches, the filing contends. Therefore, victims have been left wondering where their private information is now and if anyone has misused it, the lawsuit argues.

The suit asserts that given the frequency of cyberattacks in the medical industry in recent years, CCHN should have understood the risks and taken commensurate measures to secure the sensitive data from unauthorized disclosure.

The lawsuit looks to represent anyone in the United States whose personal information was exposed to unauthorized third parties as a result of the data breach discovered by CompleteCare Health Network on October 12, 2023.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.