KU Health System Sued Over Data Breach Of Nude Patient Photos

The University of Kansas Health System and Epic Systems Corp. negligently failed to prevent a physical therapist from accessing nude clinical photographs and other sensitive data of at least 425 female plastic-surgery patients at an outside hospital, a proposed federal class action said.

The anonymous plaintiffs alleged that the KU Health physical therapist used Epic’s electronic-health-records system to access the files of plastic-surgery patients at a nearby community hospital not affiliated with KU Health, co-defendant Lawrence Memorial Hospital.

The files contained photographs, body measurements, and other highly sensitive personal information, according to a complaint filed Tuesday in the US District ...