Plaza Radiology Facing Data Breach Lawsuit Over Cyberattack Affecting 569K People

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action claims Plaza Radiology failed to protect the personal information of approximately 569,000 people during an October 2023 cyberattack.

Did you receive a data breach letter from Plaza Radiology? Let us know here.

The 31-page data breach lawsuit relays that the Tennessee-based medical imaging services provider—which also does business as Chattanooga Imaging—reported to the U.S. Department of Health and Human Services on December 20 of last year that it had experienced a targeted cyberattack months earlier, on October 21.

According to the Plaza Radiology data breach notice, a subsequent investigation determined that an unauthorized third party had gained access to “a small number of files” stored in the company’s computer system. The suit charges that although it is still unknown what precise data was exposed during the incident, substantial personal, medical and financial information is believed to have been compromised, particularly given the clientele of the medical imaging provider.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The case contends that the incident stemmed from Plaza Radiology’s negligent cybersecurity protocols and failure to properly secure the sensitive information in its care. The company could have prevented the cyberattack completely had it adequately encrypted its servers and the data stored therein, the complaint adds.

The filing further alleges that the defendant’s notification of victims has been insufficient in the wake of the incident. The website notice explains that the company will send “formal notice letters” to affected individuals “once they are identified.”

As it is, victims remain “in the dark” regarding how the breach occurred, what information was stolen and what steps are being taken to safeguard stored data in the future, the lawsuit says. Impacted individuals can only speculate about where their private information is now and for what “potentially nefarious purposes” it is being used, the case asserts.

The lawsuit looks to represent anyone in the United States whose personal, health or financial information was exposed to unauthorized third parties as a result of the data breach experienced by Plaza Radiology on October 21, 2023.

Did you receive a data breach letter from Plaza Radiology? Let us know here.