A third class-action lawsuit has been filed against Fort Wayne, Ind.-based Medical Informatics Engineering in the wake of a May data breach that compromised the health records of nearly four million people.
Here are five things to know about the breach and MIE's legal troubles.
• The most recent lawsuit accuses MIE of breach of implied contract, violation of Indiana's Deceptive Consumer Sales Act, negligence and unjust enrichment.
• The hack is believed to have taken place on May 7, and MIE reported becoming aware of it on May 26. The company began notifying individuals whose data may have been compromised in mid-July.
• The compromised information includes health records, names, addresses, birth dates and Social Security numbers.
• The first class action lawsuit was filed in late July.
• The second lawsuit was filed in the first week of August and alleges that MIE was negligent, failed to exercise reasonable care and that the type of information stolen poses problems for patients such as identity theft and fraud.