A lawsuit filed by the victims of a Children's National Health System data breach has moved to federal court, according to a Washington Business Journal report.
Washington, D.C.-based Children's National began notifying the 18,000 patients whose data may have been compromised in February 2015, although the breach was discovered in December 2014. According to the notification letter, employees of the health system responded to emails they believed were legitimate but were actually from hackers, which allowed unauthorized access to those individual email accounts for about six months.
The letter explained that Social Security numbers were only included in a small number of instances and that neither patient charts nor electronic medical records were compromised.