Healthcare Software Provider ESO Solutions Facing Class Action Over Cyberattack Affecting 2.7M

New to ClassAction.org? Read our Newswire Disclaimer

ESO Solutions, Inc. has been hit with a proposed class action over a cyberattack announced in December 2023 that reportedly impacted the personal data of approximately 2,700,000 individuals.

Did you receive a data breach letter from ESO Solutions? Let us know here.

The 53-page lawsuit says the data breach experienced by the Texas-based company—which provides data management software to emergency medical services, fire departments and hospitals—has potentially compromised individuals’ names, dates of birth, Social Security numbers and medical treatment information.

According to a notice letter sent to victims, ESO discovered a “sophisticated ransomware incident” involving its computer systems on September 28 of this year. A subsequent investigation revealed that an unauthorized third party had gained access to the network and obtained certain files stored therein on September 17, the suit shares.

The case alleges that the ransomware attack and resultant disclosure of confidential data stemmed from the company’s negligent cybersecurity protocols.

“By implementing and maintaining reasonable safeguards and complying with standard data security practices, [ESO] could have prevented this Data Breach,” the complaint contends.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The filing further claims that although the defendant purports to have detected the incident in late September 2023, it waited until mid-December—nearly three months later—to notify impacted individuals.

What’s more, the lawsuit argues that given the prevalence of cyberattacks in recent years, ESO should have understood the risks associated with storing sensitive data and taken commensurate steps to protect the information in its care.

Like other victims, the plaintiff, a Mississippi resident, says she received a notice from ESO in mid-December informing her that her highly sensitive data had been compromised in the breach.

“As a direct cause of [ESO’s] Data Breach, [the plaintiff’s], and the Class’s [personally identifiable information] is in the hands of cyber-criminals and may be available for sale on the dark web for other criminals to access and abuse at the expense of [the plaintiff] and the Class,” the case alleges. “[The plaintiff] and the Class face a current and lifetime risk of identity theft or fraud as a direct result of the Data Breach.”

The lawsuit looks to represent anyone in the United States whose private information was compromised during the data breach that is the subject of the notice published by ESO Solutions on or about December 19, 2023.

Did you receive a data breach letter from ESO Solutions? Let us know here.