Dermatology Practice Sued After Ransomware Attack Exposed Data

US Dermatology Partners’ “reckless” data privacy practices directly resulted in a ransomware group’s acquisition of 300 gigabytes of data, exposing “potentially millions” of patients’ sensitive information, a federal lawsuit said.

The company disregarded current and former patients’ rights by willfully failing to take adequate measures to protect its data systems, according to a proposed class action filed Monday in the US District Court for the Northern District of Texas. US Dermatology is one of the largest dermatology practices in the country, serving more than 2 million patients annually at more than 100 locations across eight states, the complaint said.

The ...