December 2023 Data Breach Triggers Class Action Against MedQ

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action lawsuit accuses medQ, Inc. of failing to protect the personal information of more than 54,000 people during a December 2023 data breach.

Did you receive a data breach letter from medQ? Let us know here.

The 66-page data breach lawsuit shares that medQ, a Texas-based medical and imaging software provider, recently experienced a cybersecurity incident in which an unauthorized third party gained access to certain servers used by the company’s software platform. According to the medQ data breach notice letter, an investigation determined that certain files stored on the network were encrypted and copied by the threat actor between December 20 and December 26, 2023.

Per the suit, the data compromised in the breach belonged to current and former patients of medQ clients, and may have included full names, Social Security numbers, dates of birth, driver’s license numbers, health information, subscriber ID numbers, diagnoses, lab results, medication data, treatment dates and details, provider names and health insurance and claim information.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The case contends that despite medQ’s duty to safeguard the sensitive patient data in its care, the information stored in the company’s network was left “accessible, unencrypted, unprotected, and vulnerable” to cyberattacks.

What’s more, although the data breach apparently occurred in December 2023, medQ did not begin to notify victims until late February 2024, the complaint relays. This delay unfairly prevented affected individuals from promptly taking action to mitigate the consequences of the incident, the filing charges.

MedQ’s negligent conduct will have a lifelong impact on victims, the lawsuit alleges.

“Due to medQ’s inadequate security measures and its delayed notice to victims, [the plaintiff] and Class Members now face a present, immediate, and ongoing risk of fraud and identity theft that they will have to deal with for the rest of their lives,” the case claims.

The lawsuit looks to represent anyone in the United States whose private information was compromised during the data breach for which medQ began sending notices on or around February 23, 2024.

Did you receive a data breach letter from medQ? Let us know here.