The Federal District Court for the Southern District of Texas has dismissed a class action lawsuit against St. Joseph for a data breach. The court ruled that the named plaintiff’s claim that she may become a victim of fraud of identity theft in the future was not a basis for “standing” in the case.
Former St. Joseph’s patient Beverly Peters brought the class action suit against the medical provider after receiving notification that her medical information, along with other personally identifiable information, had been breached. She was just one of approximately 405,000 St. Joseph customers who were impacted in the breach.
Peters claimed that was a violation under the Fair Credit Reporting Act (FCRA) and that she and others involved in the breach had "an elevated risk of future identity theft/fraud." To back up her claim, she named several incidents of attempted fraud against her that could have been the result of the breach. All of the incidents were unsuccessful.
But St. Joseph claims that there is no evidence that Peters’ breached data had been used to commit fraud. And the court found that there was no way to tie the fraudulent attempts to St. Joseph’s breach.
The court also found that there were too many variables to be able to quantify “future harm” based on St. Joseph’s breach.
In essence, the ruling requires that anyone filing suit within the district court’s jurisdiction needs to be able to show that they have already suffered a financial harm and be able to show that the “harm” was caused by the data breach.
byJim Malmberg
Note: When posting a comment, please sign-in first if you want a response. If you are not registered, click here. Registration is easy and free.
Follow me on Twitter:
|