Culver City, Calif.-based Prospect Medical Holdings is facing a lawsuit that alleges it failed to protect patients’ health information from a ransomware attack.
The proposed class-action complaint, filed Oct. 16, alleges that Prospect failed to safeguard and protect individuals’ data from unauthorized access.
The complaint, obtained by Becker’s, states that individuals’ names, dates of birth, Social Security numbers, diagnosis information, lab results, prescription information, treatment information and medical record numbers were compromised during an Aug. 3 ransomware attack on Prospect.
The 16-hospital system fell victim to a ransomware attack Aug. 3 that forced facilities to turn to paper records and emergency departments and other services to temporarily shutter. The system came back online 40 days later.
After the attack, a ransomware group by the name of Rhysida allegedly posted on the dark web Aug. 24 auctioning off Social Security numbers, passport information and health data from more than 500,000 patients and employees of Prospect. Read more.