fbpx

Elekta, Northwestern Memorial Private Information Stolen Class Action

This class action centers on a ransomware attack and data breach that took place in the systems of Elekta, Inc. and affected patients of Northwestern Memorial Health Care (NMHC). The complaint alleges that the companies did not take sufficient care to protect the private information of patients who had entrusted them with personal and medical information.

The Nationwide Class for this action is all persons living in the US whose sensitive information was compromised in the data breach. An Illinois Class has also been defined for those living in Illinois whose information was compromised in the data breach.

Elekta experienced the ransomware attack and data breach between April 2 and April 20, 2021. The complaint alleges that Elekta “failed to comply with federal and state law and failed to meet industry data privacy standards…” Three kinds of information were compromised:

  • Personally identifying information (PII), such as names, Social Security numbers, dates of birth, and addresses.
  • Protected health information (PHI), such as cancer treatment records, medical histories, dates of service, and treatment plans.
  • Protected genetic information (PGI), such as the results of genetic testing and data analysis.

According to the complaint, cancer is a genetic disease caused by changes to genes: “Certain gene changes, or mutations, can cause cells to evade normal growth controls and become cancer.” The genetic tests are helpful, the complaint claims, because they “can help determine whether certain patients are more susceptible to developing certain types of cancer and whether patients will respond to certain types of medications.”

Certain cancers do not respond to the treatments intended for other cancers. The complaint alleges, “Genetic testing and DNA data is part of a patient profile and is routinely used in oncology practices to select treatment plans and prescriptions for cancer patients. Specific genetic changes can be used to predict which patients are likely to have a better or worse outcome and are part of a patient’s medical history.”

Elekta maintains a cloud-based data storage system for cancer healthcare providers. It is intended to provide medical personnel with a “complete picture” of the patient and their care.

During the data breach, an unauthorized party accessed Elekta’s systems via “compromised credentials” and was able to take out data for various business customers, including NMHC.

The plaintiff in this case was a patient of NMHC. He received a Notice dated June 25, 2021 that said his private information had been stolen in the cyberattack.

The complaint claims that the data breach was foreseeable and preventable.

Article Type: Lawsuit
Topic: Privacy

Most Recent Case Event

Elekta, Northwestern Memorial Private Information Stolen Complaint

October 13, 2021

This class action centers on a ransomware attack and data breach that took place in the systems of Elekta, Inc. and affected patients of Northwestern Memorial Health Care (NMHC). The complaint alleges that the companies did not take sufficient care to protect the private information of patients who had entrusted them with personal and medical information.

Elekta, Northwestern Memorial Private Information Stolen Complaint

Case Event History

Elekta, Northwestern Memorial Private Information Stolen Complaint

October 13, 2021

This class action centers on a ransomware attack and data breach that took place in the systems of Elekta, Inc. and affected patients of Northwestern Memorial Health Care (NMHC). The complaint alleges that the companies did not take sufficient care to protect the private information of patients who had entrusted them with personal and medical information.

Elekta, Northwestern Memorial Private Information Stolen Complaint
Tags: Exposing Private Information, Exposure to cyber crime, Ransomware Attack, Your Privacy