Negligent Cybersecurity to Blame for Panorama Eyecare Data Breach Affecting 377K Patients, Class Action Claims

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action claims lax cybersecurity on the part of Panorama Eyecare resulted in a data breach that compromised the personal information of at least 377,911 current and former patients.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 36-page Panorama Eyecare data breach lawsuit alleges that the management services organization, which serves eye clinic clients throughout Colorado and Wyoming, failed to protect patients’ data from hackers who gained access to the defendant’s internal computer network between May 22 and June 4, 2023.

According to the data breach suit, some of the sensitive personal information exposed in the incident may have included full names, Social Security numbers, dates of birth, contact details, driver’s license or state ID numbers, financial account information, medical treatments and diagnoses, and health insurance information.

The case contends that the cyberattack stemmed directly from Panorama Eyecare’s failure to implement reasonable data security measures to protect the personal information in its care.

Another of the defendant’s “multiple failings” was its “deficient” response in the aftermath of the incident, the complaint claims. For one, the filing says, the company waited until early this month—nearly a year after the cyberattack reportedly occurred—to begin sending data breach notices to victims.

“Panorama’s delay in informing victims of the data breach that their private information was compromised virtually ensured that the cybercriminals who stole this private information could monetize, misuse and/or disseminate that private information before the plaintiff and class members could take affirmative steps to protect their sensitive information,” the lawsuit states. “As a result, [the plaintiff] and class members will suffer indefinitely from the substantial and concrete risk that their identities will be (or already have been) stolen and misappropriated.”

In addition, the suit argues that the company’s offer to victims of limited credit monitoring services is “woefully inadequate” considering the lifelong threat of identity theft and medical fraud that impacted individuals now face as a result of the data breach.

The lawsuit looks to represent anyone in the United States whose private information was accessed in the Panorama Eyecare data breach.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.