in Newswire Published on June 28, 2024

Data Breach Lawsuit Says Kaiser Permanente Disclosed Info of 13.4 Million Patients to Microsoft, Google, Twitter

Newton et al. v. Kaiser Foundation Health Plan, Inc. et al.

Filed: June 14, 2024 ◆§ 3:24-cv-03625

Kaiser Foundation Health Plan, Inc., the health insurance branch of Kaiser Permanente, has been hit with a class action over a data breach announced in April 2024.

Defendant(s)

Kaiser Foundation Health Plan, Inc.

Law(s)

California Unfair Competition Law California Confidentiality Of Medical Information Act

State(s)

California

Categories

Medical/Health Privacy Data Breach

Kaiser Foundation Health Plan, Inc., the health insurance branch of Kaiser Permanente, has been hit with a proposed class action over a data breach announced in April 2024.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

According to the 29-page Kaiser Permanente data breach lawsuit, tracking technology embedded into the healthcare provider’s websites and mobile apps allowed unauthorized third-party advertisers, including Microsoft, Google and X, “unrestricted access” to current and former patients’ sensitive information for an unknown period prior to April 2024.

Although the defendant says the tracking codes have purportedly been removed, the data breach has exposed the personal and medical information of approximately 13.4 million patients who accessed Kaiser Permanente’s platforms, the case says.

TechCrunch reported on April 25 that the data shared with the third-party vendors included names, IP addresses and details about how members interacted with the company's websites and mobile apps.

The data breach suit contends that Kaiser Permanente’s “intentional release” of consumers’ private information flies in the face of its legal obligations and promises to maintain patients’ confidentiality.

“That information is now in the hands [sic] unauthorized third parties who will use it if given the chance. In fact, [one plaintiff] already has begun receiving direct solicitations and advertisements from third parties regarding medical conditions she sought treatment for. Much of this information is unchangeable and loss of control of this information is remarkably dangerous to consumers.”

The complaint claims the defendant “did nothing to warn” consumers during the time unauthorized third parties had “free reign to surveil and defraud their unsuspecting victims.” Instead, the filing charges, Kaiser Permanente “proceeded business as usual without giving class members the information they needed to protect themselves against fraud and identity theft.”

The lawsuit looks to represent any patients who received treatment at one of Kaiser Permanente’s hospital, satellite or urgent care locations and whose private medical information was released to third parties without authorization.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.

Case Spotlight

Hair Relaxer Lawsuits

Women who developed ovarian or uterine cancer after using hair relaxers such as Dark & Lovely and Motions may now have an opportunity to take legal action.

Read more here: Hair Relaxer Cancer Lawsuits