A lawsuit was filed against clinical guidance software vendor MCG Health over a March data breach that has affected at least eight healthcare organizations.
A June 21 lawsuit, filed in the District Court for the Western District of Washington, alleges that MCG Health was negligent in protecting patient's health information. The plaintiffs also allege that they face "irreparable damage" as a result of the data compromised in the breach.
The plaintiffs are seeking compensatory and punitive damages and call for MCG Health to make significant improvements to security.
Patient information obtained in the MCG Health breach contains names, Social Security numbers, medical codes, postal addresses, phone numbers, email addresses, dates of birth and gender from the following hospitals and health system:
- Omaha, Neb.-based CHI Health
- Sioux Falls, S.D.-based Avera Health
- Kinston, N.C.-based UNC Lenoir Health Care
- Henry County (Tenn.) Medical Medical Center
- Emporia, Kan.-based Newman Regional Medical Center
- Rolla, Mo.-based Phelps Health Medical Group
- Fairfield, Iowa-based Jefferson County Health Center
- Indianapolis-based Indiana University Health