Stasi, et al. v. Inmediata Health Group Corp., No. 3:19-cv-02353-JM-LL (S.D. Cal.)
Chimicles Schwartz Kriner & Donaldson-Smith LLP (“CSK&D”) filed this data breach class action lawsuit against Puerto Rico-based healthcare clearinghouse and service provider Inmediata Health Group Corp. (“Inmediata”) following reports in mid-2019 that it began notifying patients that their personal health data and records were potentially exposed on Inmediata’s public-facing webpages. According to the United States Department of Health and Human Services, over 1.5 million patients were potentially impacted by this data security event.
Plaintiffs filed a class action complaint in December 2019 alleging, among other things, that Inmediata failed to secure patients’ sensitive health records and data, and exposed this data for the whole world to see on the internet. It is alleged that during the window of the breach, a simple internet search could pull up a patient’s private health data on Inmediata’s website. Plaintiffs have filed claims under state data privacy statutes and claims for negligence.
Inmediata recently filed a motion to dismiss this action. The parties have submitted all of their briefing relating to the motion to dismiss, which is pending before the Court.