UnitedHealth Stuck With Provider, Patient Suits Over Data Breach

UnitedHealth Group Inc. and its Change Healthcare Inc. subsidiary must face two consolidated lawsuits alleging they failed to protect the personal information of millions of people in a February data breach and failed to timely process payments to medical providers.

The medical-provider plaintiffs whose tort claims related to the breach are controlled by Minnesota law adequately stated their allegations to survive a motion to dismiss, Judge Donovan W. Frank of the US District Court for the District of Minnesota said Dec. 19.

Their claims under Minnesota, Florida, Illinois, and New Jersey consumer-protection laws also survived dismissal, but the providers ...