New Data Breach Suit Hits Health System in Wave of Class Actions

A Massachusetts-based health-care system’s failure to protect patients’ sensitive information led to a December 2023 data breach that affected more than 300,000 people, the latest in a series of proposed class actions says.

Beth Israel Lahey Health Inc., which comprises 15 hospitals and specialty clinics, didn’t implement and follow basic security procedures—or its own privacy policy—to protect their patients’ sensitive medical data, according to a complaint filed Thursday in the US District Court for the District of Massachusetts.

Beth Israel and its hospitals face at least six other complaints in Massachusetts state and federal courts all filed within the last ...