New Data Breach Lawsuit Says Signature Performance, UNC Health Failed to Prevent January 2024 Cyberattack [UPDATE]

New to ClassAction.org? Read our Newswire Disclaimer

Signature Performance and healthcare client Southeastern Regional Medical Center, which does business as UNC Health Southeastern, face a proposed class action lawsuit over a reported January 2024 data breach.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 26-page data breach lawsuit relays that after Signature Performance, a healthcare administrative solutions provider, detected suspicious activity in its IT network, an investigation determined that an unauthorized third party had gained access to the company’s computer systems between January 17 and January 18, 2024.

Per the suit, the cyberattack, which impacted patients of UNC Health and other healthcare clients, has compromised consumers’ names, addresses, phone numbers, dates of birth, medical information, Social Security numbers, health insurance details and Medicare/Medicaid ID numbers.

As the case tells it, Signature Performance and UNC Health failed to take necessary data security precautions to safeguard the sensitive information in their care despite their legal obligations and promises to protect patient confidentiality. Indeed, the complaint contends that the data breach stemmed directly from deficient cybersecurity protocols on the part of the defendants.

Thanks to the defendants’ alleged negligence, Signature Performance data breach victims now face a heightened risk that their private information will be disseminated on the dark web and used to commit cybercrimes such as identity theft and medical fraud, the filing charges.

Moreover, the privacy suit takes issue with Signature Performance’s allegedly untimely data breach notice letter, which the company, according to the case, only began to issue to victims around June 10.

The Signature Performance data breach lawsuit looks to represent anyone in the United States whose personal information was compromised in the data breach publicly announced by the company in June 2024.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.