Gryphon Healthcare Hit With Six Lawsuits Over August Data Breach

Medical-billing services provider Gryphon Healthcare LLC is facing at least six proposed federal class actions alleging it failed to protect the personal information of nearly 400,000 people that was exposed in an August data breach.

Plaintiffs in the lawsuits alleged that Gryphon breached its duties under common law, contract law, industry standards, the Federal Trade Commission Act, and the Health Insurance Portability and Accountability Act to implement reasonable and adequate measures to protect sensitive data.

Information exposed in the breach included names, dates of birth, addresses, Social Security numbers, medical-treatment information, prescription information, diagnosis information, health-insurance information, and medical-record numbers, ...