Harvard Pilgrim Health Care Sued Over Ransomware Data Breach

Harvard Pilgrim Health Care Inc. failed to protect its members’ data from a ransomware attack that exposed their personal medical information and details about their insurance plan, a new class action alleges.

Three members of the Massachusetts-based insurance company filed suit in the US District Court for the District of Massachusetts on Wednesday. The lawsuit alleges Harvard Pilgrim, HPHC Insurance Company Inc., and parent company Point32Health Inc. breached an implied contract with its members and violated consumer protection law by failing to “implement steps to adequately prepare for this wholly foreseeable event.”

The federal government put Harvard Pilgrim on notice ...