Data Breach Lawsuit Claims Help at Home Failed to Prevent March 2024 Hack

New to ClassAction.org? Read our Newswire Disclaimer

HAH Group Holding Company, which does business as Help at Home, faces a proposed class action lawsuit over a March 2024 data breach that reportedly compromised the personal information of current and former patients.

Get the latest open class action lawsuits sent to your inbox. Sign up for ClassAction.org’s free weekly newsletter.

According to a notice posted on Help at Home’s website, a former vendor informed the Chicago-based home care services company in late March of this year that an unauthorized third party gained access to the vendor’s computer systems, compromising the sensitive patient information stored therein.

The 45-page Help at Home data breach lawsuit relays that the incident exposed patients’ names, dates of birth, Social Security numbers, usernames, passwords, financial account numbers and certain medical, health insurance or treatment information.

Lax data security on the part of Help at Home is to blame for the cyberattack, the data breach suit claims, contending that the defendant—which provides specialized home care for thousands of seniors and disabled individuals across at least 12 states—failed to implement proper cybersecurity practices to safeguard the private information in its care. Likewise, the case argues, the unauthorized intrusion would have been detected sooner had Help at Home adequately monitored the computer systems that housed patient data.

As the complaint tells it, the company’s conduct was particularly reckless given the current emphasis on cybersecurity across many industries, especially in the healthcare sector.

What’s more, Help at Home waited nearly five months after learning of the data breach before it began to notify impacted individuals in mid-August 2024, the filing shares.

“As a result of this delayed response, [the plaintiff] and Class Members had no idea for five months that their private information had been compromised, and that they were, and continue to be, at significant risk of identity theft and various other forms of personal, social, and financial harm,” the suit charges. “The risk will remain for their respective lifetimes.”

According to the case, Help at Home has so far offered no guarantees that the stolen information has been recovered or deleted, or that it has enhanced its data security protocols to avoid future network breaches.

The Help at Home lawsuit looks to represent anyone residing in the United States whose private information was compromised in the data breach discovered by the company in March 2024, including those who received notice of the incident.

Check our list of rebates and settlements to see if you’re covered by an open class action settlement.