fbpx

Broward Health Failure to Safeguard PII and PHI Class Action

North Broward Hospital District, which does business as Broward Health, recently suffered a “data incident” in October 2021, in which patient and employee personally identifiable information (PII) and protected health information (PHI) were accessed by unauthorized persons. The complaint for this class action holds Broward Health responsible, claiming that the data breach was due to the company’s “failure to properly secure and safeguard” the information.

The class for this action is all individuals whose PII or PHI was accessed or exfiltrated during the data incident referenced in the website notice.

Broward Health provides medical care at thirty locations in Florida, with roughly 1,700 doctors and more than 8,000 employees. Broward Health’s employees and patients must both entrust the company with extensive information before they can be employed or get health care at its locations.

On or around October 15, 2021, an unauthorized person was able to access Broward Health’s systems and take out information pertaining to more than 1,357,000 people. Broward did not detect the intrusion until October 19.

During the first two days of January 2022, Broward reported the incident to the offices of the Maine and California attorneys general and began sending out notifications to the victims of the data breach. The notification says that Broward “promptly contained the incident upon discovery” and hired a cybersecurity company to investigate.

The complaint quotes the notification as saying, also, “The investigation determined the intrusion occurred through the office of a third-party medical provider who is permitted access to the system to provide healthcare services.” Among the information accessed were names, dates of birth, addresses, financial or bank account information, Social Security numbers, driver’s license numbers, and medical history, diagnosis, and treatment information.

The notification also said, “In response to this incident, Broward Health is taking steps to prevent recurrence of similar incidents…” However, the complaint alleges that Broward failed to do a number of things before the incident occurred:

  • The company failed to “encrypt or tokenize the sensitive PII and PHI” held in its systems.
  • It failed to “delete such PII and PHI that it no longer had reason to maintain[.]”
  • It failed to “eliminate the potential accessibility of PII and PHI from the internet where such accessibility was not justified[.]”
  • It failed to “otherwise review and improve the security of its network system that contained such PII and PHI.”

The complaint asserts, “By obtaining, collecting, and storing [the] PII and PHI, [Broward Health] assumed legal and equitable duties and knew or should have known that it was responsible for protecting [the] PII and PHI from disclosure.”

Article Type: Lawsuit
Topic: Privacy

Most Recent Case Event

Broward Health Failure to Safeguard PII and PHI Complaint

March 11, 2022

North Broward Hospital District, which does business as Broward Health, recently suffered a “data incident” in October 2021, in which patient and employee personally identifiable information (PII) and protected health information (PHI) were accessed by unauthorized persons. The complaint for this class action holds Broward Health responsible, claiming that the data breach was due to the company’s “failure to properly secure and safeguard” the information.

Broward Health Failure to Safeguard PII and PHI Complaint

Case Event History

Broward Health Failure to Safeguard PII and PHI Complaint

March 11, 2022

North Broward Hospital District, which does business as Broward Health, recently suffered a “data incident” in October 2021, in which patient and employee personally identifiable information (PII) and protected health information (PHI) were accessed by unauthorized persons. The complaint for this class action holds Broward Health responsible, claiming that the data breach was due to the company’s “failure to properly secure and safeguard” the information.

Broward Health Failure to Safeguard PII and PHI Complaint
Tags: Exposing Private Information, Exposure to cyber crime, Your Privacy