Lawsuit Investigation into Connexin Software Data Breach: Was Your Child’s Information Exposed?

Attorneys want to hear from anyone who received a letter stating that their or their child’s information was exposed during the Connexin Software data breach that occurred in August 2022.

Specifically, they’re investigating whether a class action lawsuit can be filed against Connexin, who provides software and services to pediatric physician practice groups, for failing to take adequate steps to protect patients’ personal and medical information.

As part of the investigation, the attorneys need to hear from people who were sent a letter about the data breach from Connexin or their pediatrician, a copy of which can be seen here.

What Could I Get from a Class Action Lawsuit?

Connexin Software has offered one year of free identity monitoring services to children whose Social Security numbers were compromised in the data breach, but the attorneys believe this offer isn’t enough to compensate victims. An article on HIPAAJournal.com notes that children’s health information can often be misused for a long time without detection, making it “especially valuable” to cybercriminals.

A class action lawsuit could also force Connexin Software to implement more robust data security practices and procedures to protect patients’ information from future breaches.

I’ve Never Heard of Connexin. Why Do They Have My Child’s Information?

You may not have heard of Connexin Software before receiving a data breach letter because the company works directly with pediatricians. Many pediatric physician practice groups partner with Connexin Software (who does business as Office Practicum) for electronic medical records and practice management software, billing services, and business analytics tools. In the course of providing these services, Connexin may have access to much of the pediatricians’ data, including their patients’ personal and medical information.

The Connexin Software Data Breach

The company announced in late November that it had experienced a data breach affecting over 2.2 million patients. According to a notice on the Office Practicum website, Connexin Software detected “a data anomaly” on its network in late August and, after an investigation, determined by mid-September that an unauthorized party had gained access to “an offline set of patient data” that was used for data conversion and troubleshooting.

Connexin said it would send letters to individuals whose information may have been impacted, and some pediatricians may be sending their own letters to patients as well.

Which Pediatric Practice Groups Were Impacted?

Before commenting, please review our comment policy.