Summit Pathology Laboratories Sued by Patients Over Data Breach

Summit Pathology Laboratories Inc. negligently failed to protect the personal information of patients that was exposed in an April data breach, a proposed federal class action said.

Karen Alexander alleged that Summit breached its duties under common law, contract law, industry standards, the Federal Trade Commission Act, and the Health Insurance Portability and Accountability Act to implement reasonable and adequate data-security measures or provide timely notice of the incident.

Information exposed in the breach included names, physical addresses, email addresses, phone numbers, dates of birth, Social Security numbers, insurance information, biometric information, user names and passwords, driver’s license numbers, medical ...