Healthcare Provider Agrees to Cough Up $6M to Settle Data Breach Lawsuit

Healthcare Provider Agrees to Cough Up $6M to Settle Data Breach Lawsuit

American healthcare provider Banner Health has agreed to pay the alleged victims of a 2016 data breach $6 million. 





Banner Health operates 28 hospitals and specialized facilities across six states, providing jobs for over 50,000 people. The company, which is the largest single employer in Arizona, suffered a data breach in June 2016.





Threat actors accessed the private health data of 2.9 million individuals over a period of approximately two weeks.





Two months later, the alleged victims of the breach brought a class action lawsuit against the healthcare provider. According to documents filed in the US District Court of Arizona on December 5, 2019, that suit has now been settled with Banner Health agreeing to pay $6 million to the plaintiffs.





The lawsuit alleges that threat actors illegally accessed the computer systems of Banner Heath in a financially motivated hack, exfiltrating sensitive personal information of approximately 2.9 million patients. 





Entry into Banner Health's network was gained via a payment processing system used in the food and beverage outlets of the healthcare provider's hospitals.





Information said to be appropriated during the breach includes names, addresses, dates of birth, prescription information, medical histories and social security numbers. 





It is further alleged that the credit and debit card numbers of 30,000 individuals who had visited food and beverage outlets at Banner Health hospital sites were also stolen. According to the suit, malware was used to steal card details as purchases were made.





The lawsuit alleges Banner Health failed to implement appropriate safegu ..

Support the originator by clicking the read the rest link below.