Health Gorilla Didn’t Shield Data From Bad Actors, Suit Says (1)

Multiple health-care companies, including Epic Systems Corp., sued Health Gorilla Inc. alleging the patient data interoperability platform is allowing bad actors to fraudulently access and take sensitive patient health information from exchange networks for financial gain.

Health-care interoperability frameworks like Carequality and TEFCA allow health-care providers to get patient medical records across networks in real time by providing basic demographic information, the complaint filed in the US District Court for the Central District of California said.

But Health Gorilla’s failure to properly vet access to the frameworks has allegedly allowed bad actors to get those records to market to class ...