LOUISVILLE, Ky. — A new class action lawsuit has been filed against Norton Healthcare in the wake of the health system admitting it suffered from a ransomware attack earlier this year.
Margaret Garrett, a patient impacted by the attack, filed the lawsuit.
In the lawsuit, Garrett claims that Norton failed to secure and safeguard hers and around 2.5 million other people's personal information.
The lawsuit calls on Norton to not only pay for damages that may have occurred because of the suit, but it also asks the judge to direct the healthcare provider to implement new data security practices to prevent future breaches.
In a letter sent to those potentially affected, Norton said it is "enhancing its security safeguards."
Anyone who got the letter has until March 7, 2024 to sign up for two years of free identity monitoring and protection provided by Norton Healthcare and Kroll.
Norton Healthcare released the following statement in regard to the lawsuit:
"We take safeguarding personal information seriously and plan to vigorously defend ourselves in any litigation associated with the ransomware attack from earlier this year."
A former employee and current patient at Norton Healthcare also filed a federal class action lawsuit against the provider in July 2023.
That lawsuit alleges Norton Healthcare maintained private information in a reckless manner and failed to take the steps to secure it.
Make it easy to keep up-to-date with more stories like this. Download the WHAS11 News app now. For Apple or Android users.
Have a news tip? Email assign@whas11.com, visit our Facebook page or Twitter feed.