Luminis Health Care cyberattack class-action lawsuit claims unencrypted patient data exposed at AAMC
Three patients have filed a class-action lawsuit against Luminis Health Care over its cybersecurity attack.
Luminis, which operates the Anne Arundel Medical Center, faces a lawsuit that claims it was negligent in safeguarding patients’ medical information.
The patients claimed Luminis fully exposed their personal information because it was stored in an unencrypted internet-accessible environment.
Experts said medical providers are legally required to protect patient health information, but that these types of cases, while common, are difficult to prove.
“The potential for harm is not enough to establish legal standing, in which case, if they can’t show actual harm, the case will actually get thrown out,” said Markus Rauschecker, executive director of the University of Maryland Baltimore’s Center for Cyber, Health and Hazard Strategies.
The complaint alleges Luminis intentionally, willfully and recklessly failed to implement and maintain reasonable measures to ensure private information was safeguarded. The plaintiffs contend their personal information is fully exposed to identity theft, financial and/or medical fraud.
The lawsuit makes numerous references to the high value of medical records on the dark web that now surpasses Social Security and credit card numbers.
Video below: AAMC cyberattack delays patient care (Sept. 9)
The lawsuit alleges thieves could use the information to purchase prescription drugs, submit false claims to insurance companies or even undergo surgery under a fake name.
The lawsuit contends the impact is wide and that many more patients are eligible for the class action.
Experts warn cyberattacks are now more sophisticated and are happening at an alarming rate.
“It’s not a question of if, but a question of when this will happen,” Rauschecker said. “Every organization needs to have a plan in place to prepare themselves for cyber incidents and a plan in place to know how to respond to a cyber incident.”
Luminis’ website indicates telephone service has been restored since the Sept. 1 cyberattack, but the patient portal remains down. Clinics are open and surgeries continue.
Video below:Luminis Health cyberattack disrupts AAMC(Sept. 3)
Luminis Health cyberattack delays cancer treatment and test results
Luminis Health cyberattack forces Anne Arundel Medical Center to reroute patients
Scammers are impersonating MyChart. Here’s how to spot them
GET BREAKING NEWS ON THE GO: WBAL-TV 11 News app & email newsletters, follow us on social media
Make WBAL-TV a preferred
