The systems were restored in late May, but the shutdowns and investigation resulted in losses in revenue. Additionally, Scripps has since faced a number of lawsuits filed by patients affected by the breach. One group filed a suit in June, claiming that the health system's inadequate security measures prevented it from detecting the attack sooner and has potentially created "a lifetime risk of identity theft.”

And while several lawsuits filed in federal court have been dismissed, the dismissals are being appealed. Judge Gregory Pollack, of the San Diego County Superior Court, recently allowed six different class-action lawsuits to be combined, with each alleging that Scripps should be held financially responsible for failing to protect medical records and other sensitive information, including social security numbers. Pollack also said he is essentially “pulling up the drawbridge” on additional suits until the consolidated cases are resolved, reported La Jolla Light.

Back to HCB News

Health IT Homepage