Cigna sued after data breach exposes health and claims information of patients

Cigna data breach class action lawsuit overview:

• Who: Plaintiff Karina Lopez is suing The Cigna Group Inc.
• Why: Lopez claims Cigna failed to properly secure and protect patient data in a data breach.
• Where: The Cigna class action lawsuit was filed in Connecticut federal court.

A new class action lawsuit accuses The Cigna Group of failing to properly secure and protect patient data in a data breach.

Plaintiff Karina Lopez filed the class action complaint against Cigna on Dec. 17 in Connecticut federal court, alleging violations of state and federal consumer laws.

Lopez claims Cigna failed to properly secure her personally identifiable information (PII) and protected health information (PHI) in a data breach that occurred between October 2024 and January 2025.

The data breach, which Cigna discovered in November 2025, involved an unauthorized actor accessing the network of one of Cigna’s vendors, exfiltrating data, such as names, health care IDs, dates of service, treatment costs and claims numbers, Lopez alleges.

As a result of Cigna’s alleged negligence, Lopez claims that her PII and PHI are now available on the dark web and that she and other affected individuals face an increased risk of identity theft.

Cigna failed to protect patient data, class action alleges

Lopez alleges that Cigna failed to implement reasonable security measures to protect patient data and that the company took too long to notify affected individuals of the breach.

She claims that Cigna’s actions have caused her and other affected individuals to incur damages, such as identity theft, lost time and expenses mitigating harms, increased risk of harm, damaged credit, deprivation of the value of their private information, loss of privacy and other damages.

Lopez is looking to represent anyone in the United States whose PII and PHI was compromised in the Cigna data breach.

She is suing for negligence, negligence per se, breach of implied contract, unjust enrichment and injunctive and declaratory relief and is seeking certification of the class action, damages, fees, costs and a jury trial.

Meanwhile, Cigna Health and Life Insurance Co. agreed to a $1.07 million settlement to resolve a class action lawsuit claiming it misclassified out-of-network providers as in network.

What do you think of the allegations made in this Cigna class action lawsuit? Let us know in the comments.

The plaintiff is represented by Oren Faircloth of Siri & Glimstad LLP, Mariya Weekes of Milberg PLLC and Jeff Ostrow of Kopelowitz Ostrow P.A.

The Cigna data breach class action lawsuit is Lopez v. The Cigna Group Inc., Case No. 2:25-cv-02113, in the U.S. District Court for the District of Connecticut.

Read About More Class Action Lawsuits & Class Action Settlements:

• SereneLife Home and Blue Wave recall nearly 13,500 above-ground pools due to drowning risk
• Electrolux sued over claims Frigidaire oven doors can spontaneously explode
• FDA approves adding brain tumor warning label to Pfizer’s Depo-Provera birth control shot
• TransUnion faces second class action over data breach involving 4.4 million individuals