12 states sue local company
Indiana Attorney General Curtis Hill announced today he is leading a 12-state federal lawsuit against a Fort Wayne web-based electronic health records company that allegedly sustained a data breach compromising the data of more than 3.9 million people.
The lawsuit alleges that Medical Informatics Engineering Inc. and NoMoreClipboard LLC (collectively “MIE”) violated provisions of the Health Insurance Portability and Accountability Act as well as state claims including Unfair and Deceptive Practice laws, Notice of Data Breach statutes, and state Personal Information Protection Acts.
Between May 7, 2015, and May 26, 2015, the lawsuit says, hackers infiltrated WebChart, a web application run by MIE. The hackers stole the electronic protected health information of more than 3.9 million individuals : including individual names, telephone numbers, mailing addresses, usernames, hashed passwords, security questions and answers, spousal information (name and potentially dates of birth), email addresses, dates of birth, Social Security numbers, lab results, health insurance policy information, diagnosis, disability codes, doctors’ names, medical conditions, and children’s names and birth statistics, the lawsuit says.
For more on this story, read Tuesday’s print edition of The Journal Gazette or return to www.journalgazette.net after 1 a.m. Tuesday.