Injured Workers Pharmacy Sued Following Data Breach Reportedly Affecting 75K Patients

New to ClassAction.org? Read our Newswire Disclaimer

Injured Workers Pharmacy, LLC has been hit with a proposed class action over a January 2021 data breach that reportedly compromised the personal information of more than 75,700 current and former patients.

According to the 40-page case, the home delivery pharmacy service did not have in place adequate cybersecurity measures to prevent the breach and then failed to discover the unauthorized intrusion into its system for four months. The lawsuit says the information compromised in the breach included at least patients’ names and Social Security numbers.

Per the case, Injured Workers Pharmacy’s failure to timely detect the breach—and its apparently “inexplicabl[e]” delay in notifying those affected—has left patients “vulnerable to identity theft.”

The timeline in the lawsuit begins in January 2021, when the defendant allegedly “lost control” over more than 75,700 patients’ personal records in a data breach. The suit says Injured Workers Pharmacy failed to have in place even “basic cybersecurity protocols” at the time its system was hacked.

According to the case, after Injured Workers Pharmacy finally discovered the breach in May 2021, its investigation into the incident “dragged on” for seven more months. During this time, the filing says, the defendant failed to warn patients that their information may have been compromised, robbing them of an opportunity to mitigate the effects of the breach, the lawsuit contends.

The case says that when Injured Workers Pharmacy finally notified victims in early February 2022, its data breach notice “downplayed the Data Breach’s severity and the threat it posed to patients.” Per the suit, the defendant stated in the notice that it had “no indication” that patients’ information had been misused as a result of the incident even though hackers “had unfettered access to patient information for four months.”

Moreover, the lawsuit claims Injured Workers Pharmacy has failed to offer free credit monitoring and identity protection services to all data breach victims and has instead “put the onus on victims” by urging them to monitor their accounts. According to the suit, data breach victims have been subjected to “immediate, substantial, and long-lasting harms” as a result of the breach.

The lawsuit looks to cover U.S. residents whose personal information was compromised in the data breach disclosed by Injured Workers Pharmacy in February 2022.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s newsletter here.