April 18, 2023
A health care company indirectly violated HIPAA security rules and waited nearly four months to inform those affected by a "massive and preventable cyberattack" that revealed the protected health information of at least 77,000 people, a second proposed class action lawsuit alleges.