Excellus Health Plan, New York's largest health insurance provider, is facing a lawsuit for negligence following the September announcement of a data hack that may have compromised up to 10 million clients.
Here are four things to know about the lawsuit.
• The class action suit for negligence was filed Sept. 18.
• The plaintiffs allege that the hack initially occurred in December 2013 and that the perpetrators operated undetected for the following 20 months.
• Excellus claims to not have discovered the hack until Aug. 5. They did not disclose until Sept. 9 and the plaintiffs say Excellus has not yet disclosed which clients were affected.
• The plaintiffs are seeking an undisclosed amount for damages made during the data breach and court costs. They also plan to file an injunction to force Excellus to disclose the name of those affected.