Case Overview
On August 13, 2018, Plaintiffs filed their Second Amended Complaint against UnityPoint Health (“UnityPoint”), an integrated healthcare provider serving Wisconsin, Iowa, and Illinois. Plaintiffs brought this litigation on behalf of individuals whose personally identifiable information/protected health information (PII/PHI) was allegedly compromised in two data breaches. The First Data Breach occurred in November 2017 and the Second Data Breach was in March 2018
Plaintiffs alleged that cyber-criminals accessed and obtained the PII/PHI of UnityPoint’s patients and employees through one or more UnityPoint employee email accounts. Approximately 16,429 UnityPoint patients and employees were compromised in the first data breach. Approximately 1.4 million UnityPoint patients and employees were compromised in the second data breach.