Data Breach Lawsuit Claims Monte Nido Failed to Prevent September 2023 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

Monte Nido faces a proposed class action lawsuit over a September 2023 data breach that reportedly compromised the personal information of current and former patients and employees.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

According to Monte Nido’s August 2024 data breach notice letter, an unauthorized third party gained access to the mental health treatment provider’s computer network sometime between September 16 and September 22, 2023, compromising the sensitive data stored therein.

The 40-page Monte Nido data breach lawsuit shares that the incident may have exposed individuals’ names, addresses, dates of birth, Social Security numbers, contact details, driver’s license or government-issued ID numbers, financial account information, passport numbers, digital signatures, taxpayer ID numbers, workers’ compensation claim data, and certain medical and health insurance information.

Lax cybersecurity on Monte Nido’s part is to blame for the data breach, the suit alleges, arguing that the healthcare provider did not implement data security protocols necessary to protect the highly sensitive information in its care. As the case tells it, the cyberattack could have been prevented had the defendant properly encrypted the private data or deleted it when it was no longer needed.

The complaint contends that given the frequency of data breaches in the healthcare industry in recent years, Monte Nido should have understood the risks and taken appropriate measures to safeguard the information it housed.

As a result of the company’s alleged negligence, thousands of victims like the plaintiff, a former Monte Nido employee residing in New York, now face a lifelong threat of being targeted for cybercrimes such as medical fraud and identity theft, the filing charges.

The Monte Nido lawsuit looks to represent anyone in the United States whose personal information was accessed and/or acquired by an unauthorized third party in the data breach, including those who were sent notice of the incident.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.