A county judge in Pennsylvania has dismissed a class-action lawsuit against Pittsburgh-based UPMC regarding a 2014 data breach, according to a Trib Live report.
In March 2014, UPMC reported 322 employees' tax information had been stolen, a number they later revised to 27,000 employees. A class-action lawsuit was filed in the Allegheny County Court of Common Pleas, alleging the health system failed to adequately protect employee information and also did not disclose the breach in a timely manner.
In his opinion, Common Pleas Judge R. Stanton Wettick wrote UPMC itself was also a victim of the cyberattack and an improved cybersecurity system may not have prevented the breach, according to the report.
More articles on data breaches:
Healthcare now spending billions to defend the IT systems it spent billions to install
Data breaches now cost an average of $3.8M each: 6 things to know
800 patients' records compromised at Jefferson Hospital: 4 things to know