Ohio hospital, vendor hit with class action suit after data breach

Ohio's Salem Community Hospital and Perry Johnson & Associates, a medical transcription company, face a class action lawsuit following a data breach potentially exposing personal and health information of about nine million people. The lawsuit claims a six-month delay in notification, increasing risk of identity theft, and alleges failure to establish cybersecurity best practice and staff training. The breach, among the larger healthcare data breaches reported this year, revealed personal data, including names, birth dates, medical record numbers, diagnoses, and service times. Several other health systems reported compromised patient data due to the vendor's breach. Defendants allegedly discovered the breach in May but didn't notify until November.

Opens on Healthcare Dive