Patients file class-action lawsuit over Luminis Health cyberattack

Three patients have filed a class-action lawsuit against Luminis Health Care over its cybersecurity attack. Luminis, which operates the Anne Arundel Medical Center, faces a lawsuit that claims it was negligent in safeguarding patients' medical information. The patients claimed Luminis fully exposed their personal information because it was stored in an unencrypted internet-accessible environment. Experts said medical providers are legally required to protect patient health information, but that these types of cases, while common, are difficult to prove. "The potential for harm is not enough to establish legal standing, in which case, if they can't show actual harm, the case will actually get thrown out," said Markus Rauschecker, executive director of the University of Maryland Baltimore's Center for Cyber, Health and Hazard Strategies. The complaint alleges Luminis intentionally, willfully and recklessly failed to implement and maintain reasonable measures to ensure private information was safeguarded.

Missing media or need the complete publisher report? Open wbaltv.com ↗