Magellan Health System Data Breach  – Class Action Investigation

CSK&D is investigating a potential data breach class action lawsuit relating to recent news that Magellan Health Care Systems, a managed care provider, was the victim of a ransomware attack involving six Magellan affiliate companies, including health plans, in addition to three University of Florida related entities. Each of these breaches that are linked to the Magellan ransomware attack are listed on the U.S. Department of Health and Human Services( “HHS”) HIPAA Breaching reporting tool web-page, since the breach potentially involves the exposure of sensitive health data of potentially thousands of people or more.

Specifically, it is reported that Magellan first disclosed existence of the breach on May 12, 2020, detailing that it discovered on April 11, 2020 that it was the victim of a criminal ransomware attack on its corporate network sparking a temporary systems outage that resulted in an exfiltration of confidential company and personal information for a number of individuals. Then in a breach notification statement on June 12, Magellan confirmed that approximately 102,700 individuals were likely affected by the breach. As the investigation deepened, this number has grown to a staggering 355,000 individuals as of June 30, 2020, making it the third largest heath data breach reported to the HHS in 2020 so far.

As a result of the breach, it is alleged that the following information of an estimated 355,000 individuals, or more, may have been compromised: names; social security numbers; and sensitive health data including (but not limited to) treatment information, health insurance account numbers, member ID numbers, and other unspecified health-related information.

If you believe your personal health information may have been compromised as a result of this breach, please contact the attorney(s) listed below by using the form provided.

(*) Indicates required field: When communicating with us through this site or otherwise in connection with a matter for which we do not already represent you, your communication may not be treated as privileged or confidential, and does not create an attorney-client relationship between you and our Firm.

Attorneys for this case:

Benjamin F. Johns
Mark B. DeSanto