Oracle Health Hit With Class Action Over Breach of Patient Data

Electronic health records provider Oracle Health Inc. negligently failed to protect patient data that was exposed in a January data breach, a proposed federal class action said.

Rebecca Blount and Cheryl McCully alleged that Oracle Health breached its duties under common law, contract law, industry standards, the Federal Trade Commission Act, and the Health Insurance Portability and Accountability Act to implement reasonable and adequate data-security measures and provide timely notice of the incident.

The breach struck the company’s legacy data-migration servers that store patient data for many US healthcare organizations and hospitals, according to a complaint filed April 11 in ...