Prospect Medical Class Action Data Breach Lawsuit
The Lyon Firm is reviewing updates on an ongoing class action that named Prospect Medical as a defendant last summer. The Lyon Firm is involved in the case and in a wide range of other data privacy litigation.
In a fluid investigation into a cyberattack, the company said on January 31, 2025, in a notice with the attorney general of Massachusetts that Cigna policyholder information was affected in the August 2024 cyberattack . As many as 29 insurers and policyholder information was potentially compromised by the breach.
What Happened at Cigna?
According to the notice, Prospect said Cigna disclosed policyholder information to Aquent, a third-party staffing company. Affected consumer information includes names, Social Security numbers, addresses, dates of birth, diagnoses, lab results, medications and other treatment information, health insurance information, dates of treatment, and financial information. The security breach took place within the network of Prospect Medical.
What happened at Prospect Medical?
After a reported data breach last summer, the health system notified individuals that were affected, and said on its website that the following hospitals had personal data stolen:
— Foothill Regional Medical Center (Tustin)
— Los Angeles Community Hospital
— Los Angeles Community Hospital (Norwalk)
— Los Angeles Community Hospital (Bellflower)
— Southern California Hospital (Culver City)
— Southern California Hospital (Hollywood)
— Southern California Hospital (Van Nuys)
Prospect Medical also notified some employees of Eastern Connecticut Health Network and Waterbury Health that data related to them may have been compromised.
A Rhysida ransomware attack in August breached the company network, impacting tens of thousands. The breach was reported to the HHS’ Office for Civil Rights as affecting 1,309,096 individuals.
A lawsuit was subsequently filed against Prospect Medical Holdings. The lawsuit asserts claims of negligence, negligence per se, violation of the Federal Trade Commission Act, breach of implied contract, and violations of the California Confidentiality of Medical Information Act (CMIA), California Unfair Competition Act, and the California Constitution.