BJC HealthCare Failed to Stop Improper Data Access, Suit Alleges

St. Louis-based BJC HealthCare should have prevented unauthorized email access that exposed patient data, a federal lawsuit in Illinois claims.

BJC allegedly acted negligently, invaded consumer privacy, and violated the Health Insurance Portability and Accountability Act, claims a potential class suit filed Wednesday in the U.S. District Court for the Southern District of Illinois.

An unauthorized person in March gained access to several BJC employees’ email accounts, according to the complaint. That person allegedly could view names and birth dates, as well as such protected health information as medical record account numbers, medications, and types of treatment.

Healthcare providers under ...