IntraSystems LLC and Allegheny Health Network: Pittsburgh Health System Patients Advance Data Breach Lawsuit

Pittsburgh Health System Faces Class Action Over 2024 Data Breach

A federal court has ruled that Pittsburgh-based Allegheny Health Network (AHN) and its IT vendor IntraSystems LLC must defend against multiple claims in a proposed class action lawsuit stemming from a 2024 data breach that exposed the personal information of approximately 294,000 patients.

In a decision by Judge J. Nicholas Ranjan of the U.S. District Court for the Western District of Pennsylvania, plaintiffs successfully demonstrated injury-in-fact, establishing legal standing to pursue allegations of negligence, breach of fiduciary duty, breach of implied contract, unjust enrichment, and declaratory judgment against AHN. The court also allowed claims of negligence and declaratory judgment to proceed against IntraSystems.

The lawsuit alleges that both entities failed to adequately protect patient data, leading to the exposure. The ruling clears the way for the case to advance, though no final determination on liability has been made. The breach’s full impact on affected patients remains under scrutiny as the litigation progresses.

Source: https://news.bloomberglaw.com/health-law-and-business/pittsburgh-health-system-patients-advance-data-breach-lawsuit

IntraSystems, LLC cybersecurity rating report: https://www.rankiteo.com/company/intrasystems

Allegheny Health Network cybersecurity rating report: https://www.rankiteo.com/company/allegheny-health-network

"id": "INTALL1786048474",
"linkid": "intrasystems, allegheny-health-network",
"type": "Breach",
"date": "1/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '294,000 patients',
                        'industry': 'Healthcare',
                        'location': 'Pittsburgh, Pennsylvania, USA',
                        'name': 'Allegheny Health Network (AHN)',
                        'type': 'Healthcare Provider'},
                       {'industry': 'Information Technology',
                        'name': 'IntraSystems LLC',
                        'type': 'IT Vendor'}],
 'data_breach': {'number_of_records_exposed': '294,000',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (patient data)',
                 'type_of_data_compromised': 'Personal information'},
 'date_publicly_disclosed': '2024',
 'description': 'A federal court ruled that Allegheny Health Network (AHN) and '
                'its IT vendor IntraSystems LLC must defend against multiple '
                'claims in a proposed class action lawsuit stemming from a '
                '2024 data breach that exposed the personal information of '
                'approximately 294,000 patients. The lawsuit alleges '
                'negligence and failure to adequately protect patient data.',
 'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
                                       'lawsuit',
            'data_compromised': 'Personal information of patients',
            'identity_theft_risk': 'High',
            'legal_liabilities': 'Class action lawsuit, potential fines'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'U.S. District Court for the Western District of '
                           'Pennsylvania'}],
 'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
 'title': 'Allegheny Health Network (AHN) Data Breach Class Action Lawsuit',
 'type': 'Data Breach'}