Imperium Health Management, LLC has published a notice highlighting a recent incident that may have exposed patients’ sensitive data treated by the medical practitioners whom Imperium services.
Per Imperium, two of their employees were victims of a phishing email. In this type of scheme, an individual with access to secure systems is essentially tricked into entering their credentials into an unsecured or otherwise unauthorized portal. Via such a scheme, Imperium’s employees inadvertently exposed their internal email credentials, which unauthorized users used to access sensitive company information.
On June 18th of 2020 was when Imperium first learned, after conducting an investigation, that the employees’ accounts had been compromised. Among the data which may have been accessed by the unlawful users are patient’s:
At this time, Imperium has stated that the investigation found no evidence that unauthorized parties acquired such sensitive information nor that it has been used to cause damages to unwitting patients. Nevertheless, the company has alerted the patients they believe could have been affected by the data breach.
Ali Saeed, a founding partner at the Saeed & Little law firm, has given notice that his experienced data privacy team is investigating the phishing incident at Imperium Health as well as its consequences.
Any data breach’s repercussions can be quite disastrous for the individuals whose sensitive data is leaked. In the cases where the most personal information is allowed to be accessed by unscrupulous parties, the negative effects can be felt by victims for years. With how serious the financial and personal damages may be, it’s no surprise that victims of data leaks often consider taking legal action against those who failed to take the proper steps to safeguard data.
As it stands, Mr. Saeed’s team is still taking the first steps to investigate the Imperium breach. Individuals who have communicated with the Saeed & Little firm have been informed of their legal rights if they were affected.
No legal action has been taken against the company following this incident; however, if enough evidence were to be compiled, a class action may be pursued as a recourse for getting affected persons the compensation they deserve.