Acadian Ambulance is seeking to have a class action lawsuit dismissed over a 2024 data breach. The breach compromised the sensitive information of 2.9 million people, including Social Security numbers. The company argues that plaintiffs have not demonstrated any actual harm resulting from the breach. They assert that without proof of damages, the class action should not proceed.
The data breach occurred in July 2024 when a ransomware attack by the hacker group Daixin stole personal data from Acadian Ambulance servers. The lawsuit claims the information was leaked onto the dark web, but Acadian Ambulance disputes the number of affected individuals. The company also states that employee data, including Social Security numbers, was not compromised, despite what the lawsuit suggests.
Plaintiff attorneys argue that the breach caused a potential for harm, given that personal information like Social Security numbers was stolen. They believe that the involvement of a criminal group in the leak puts victims at ongoing risk of identity theft. The plaintiffs claim that the company failed to secure personal and health information despite prior warnings about cybersecurity risks to medical institutions.
Acadian Ambulance has refused to pay the $7 million ransom demanded by the hacker group. The lawsuit alleges that the company’s negligence in securing sensitive data has led to financial and emotional costs for the victims. Victims have had to take steps such as monitoring their financial data and closing accounts to mitigate the breach’s effects.
Reference:
