Massachusetts Social Services Provider Sued Over Data Breach

Justice Resource Institute Inc. failed to protect the personal information of more than 23,000 people that was exposed in a February data breach, a proposed federal class action said.

Lisa Anderson alleged that JRI breached its duties under contract, statute, and common law to implement reasonable measures to protect sensitive data, and failed to comply with industry data-security standards or provide timely and adequate notice of the breach.

Information exposed in the incident included names, addresses, dates of birth, Social Security numbers, health-insurance numbers, Medicare or Medicaid numbers, diagnoses, treatment information, treatment facilities, provider information, and dates of treatment, according ...