ERMI: Healthcare AuthorityDeals & Corporate GovernanceDigital Health & TechnologyOtherPolicy & Compliance

Patients Drop Data Breach Lawsuit Against Georgia Medical Billing Firm

A group of patients has voluntarily dismissed a class-action lawsuit against ERMI, a Georgia-based medical billing company, alleging the firm failed to adequately protect sensitive patient and employee data. The lawsuit, filed earlier this year, claimed that ERMI’s security lapses led to a September data breach exposing personal and health-related information.

The case centered on accusations that ERMI did not implement sufficient safeguards to prevent unauthorized access to confidential records. While the dismissal halts legal proceedings, the incident underscores ongoing concerns about healthcare data security and the risks of inadequate cybersecurity measures in medical billing operations.

No further details on the breach’s scope or the reason for the lawsuit’s withdrawal have been disclosed. The case highlights the growing scrutiny of third-party vendors handling sensitive health data and the potential legal consequences of security failures.

Source: https://www.law360.com/healthcare-authority/digital-health-technology/articles/2516321/patients-drop-data-breach-suit-against-medical-billing-co-

Ermi LLC. cybersecurity rating report: https://www.rankiteo.com/company/ermi-llc.

"id": "ERM1787432341",
"linkid": "ermi-llc.",
"type": "Breach",
"date": "9/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Patients and employees',
                        'industry': 'Healthcare',
                        'location': 'Georgia, USA',
                        'name': 'ERMI',
                        'type': 'Medical Billing Company'}],
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal information',
                                              'Health-related information']},
 'date_detected': '2023-09',
 'description': 'A group of patients has voluntarily dismissed a class-action '
                'lawsuit against ERMI, a Georgia-based medical billing '
                'company, alleging the firm failed to adequately protect '
                'sensitive patient and employee data. The lawsuit claimed that '
                'ERMI’s security lapses led to a September data breach '
                'exposing personal and health-related information. The case '
                'highlights the growing scrutiny of third-party vendors '
                'handling sensitive health data and the potential legal '
                'consequences of security failures.',
 'impact': {'brand_reputation_impact': 'Potential legal consequences and '
                                       'scrutiny of third-party vendors',
            'data_compromised': 'Personal and health-related information',
            'legal_liabilities': 'Class-action lawsuit (voluntarily '
                                 'dismissed)'},
 'lessons_learned': 'Ongoing concerns about healthcare data security and risks '
                    'of inadequate cybersecurity measures in medical billing '
                    'operations',
 'post_incident_analysis': {'root_causes': 'Security lapses and insufficient '
                                           'safeguards'},
 'references': [{'source': 'News Article'}],
 'regulatory_compliance': {'legal_actions': 'Class-action lawsuit (voluntarily '
                                            'dismissed)'},
 'title': 'Patients Drop Data Breach Lawsuit Against Georgia Medical Billing '
          'Firm',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Insufficient safeguards to prevent unauthorized '
                            'access'}