Great Valley Cardiology Responsible for 2023 Data Breach, Class Action Says

New to ClassAction.org? Read our Newswire Disclaimer

Great Valley Cardiology, a healthcare provider based in Scranton, Pennsylvania that also does business as Commonwealth Health Physician Network-Cardiology, has been hit with a proposed class action in the wake of a months-long data breach.

Did you receive a data breach letter from Great Valley Cardiology (or Commonwealth Health Physician Network-Cardiology)? Let us know here.

According to the 51-page case, unauthorized parties infiltrated Great Valley Cardiology’s computer network between February 2 and April 14, 2023 and gained access to sensitive personal and health information belonging to 181,764 patients. The lawsuit relays that the data compromised in the breach included patients’ names, addresses, phone numbers, dates of birth, Social Security numbers, health plan numbers, health plan claims information, medical record numbers and medical information.

The cyberattack, which Great Valley Cardiology says it discovered on April 13, was a direct result of the healthcare provider’s failure to implement adequate cybersecurity measures to safeguard patients’ private data, the complaint alleges.

“In addition, Defendant failed to properly monitor the computer network and systems that housed the Private Information,” the suit says. “Had it properly monitored its property, it would have discovered the intrusion sooner rather than allowing cybercriminals a period of unimpeded access to the Private Information of Plaintiff and Class Members.”

The plaintiff, a Pennsylvania resident, says he was unaware that his information might have been exposed to cybercriminals until Great Valley Cardiology began sending data breach notice letters to victims on June 12 of this year.

Like other affected individuals, the man now faces a “current, imminent, and ongoing” risk of identity theft and fraudulent charges that will likely persist for years to come, the filing stresses.

To add insult to injury, the potential for improper disclosure of patients’ data was a “known risk” to the defendant, given that this is not the first data breach Great Valley Cardiology has suffered in recent years, the case alleges.

The lawsuit looks to represent anyone in the United States whose private information was compromised in Great Valley Cardiology’s data breach.

Did you receive a data breach letter from Great Valley Cardiology (or Commonwealth Health Physician Network-Cardiology)? Let us know here.