Medical Center Breach Leaked Patient Data on Dark Web, Suit Says

Bayhealth Medical Center Inc.'s failure to comply with federal rules to protect patients’ sensitive information led to a July breach exposing troves of health data on the dark web, according to a proposed class action.

The medical center based in Dover, Delaware had no effective means in place to prevent, detect, or stop breaches of its systems and didn’t comply with HIPAA security standards, according to a complaint filed Wednesday in the US District Court for the District of Delaware.

The data breach discovered on July 31 is part of a “pattern of negligent data security,” plaintiffs wrote, pointing to ...