Utah Medical Clinic Sued by Insurer Over Data Breach Coverage

Selective Insurance Co. of America sued a Utah medical clinic, seeking to limit coverage for a proposed class action stemming from a 2025 data breach.

Selective has no duty to defend or pay claims because the data breach targeting Revere Health PC occurred before the commercial general liability policy took effect and because multiple policy exclusions apply to data privacy violations, the insurer said in a complaint filed March 20 in the US District Court for the District of Utah.

Cybercriminals allegedly breached the clinic’s network in August 2025, accessing thousands of patients’ private health information. Revere violated HIPAA privacy ...