Consumers file class actions over American Vision Partners data breach

American Vision Partners data breach overview: 

• Who: American Vision Partners (AVP) faces at least three class action lawsuits related to a 2023 data breach that compromised the personal information of more than 2 million individuals. 
• Why: The lawsuits claim the company did not properly protect medical and personal information, such as Social Security numbers.
• Where: The AVP class actions were filed in federal court in Arizona.

American Vision Partners (AVP) faces at least three class actions related to a data breach that affects 2,350,236 individuals’ the health and personal information.

AVP discovered the data breach Nov. 14, 2023, according to the lawsuits. It compromised names, contact information, dates of birth, medical information such as the services received, clinical records, medications and, for some individuals, Social Security numbers and health insurance information.

Identity fraud affected 14.4 million people in 2018, while 3.3 million people suffered unrecouped losses, which is three times the number in 2016. Out-of-pocket losses in 2018 are estimated at $1.7 billion, the lawsuits say.

Private health information is often sold on the black market, where credit card information is worth $5 and health information is worth $20 to $70, the lawsuits cite Jim Trainor, FBI cybersecurity expert, as saying.

“A complete identity theft kit that includes health insurance credentials may be worth up to $1,000 on the black market, whereas stolen payment card information sells for about $1,” the lawsuits cite PriceWaterhouseCoopers as estimating.

AVP classes vary slightly based on accessed info, notification letters

The three late-February AVP class actions have slightly different classes, including all patients whose health information was accessed, all patients whose private information was compromised and all recipients of AVP data breach notices. 

“The data breach was a direct result of defendant’s failure to implement adequate and reasonable cyber-security procedures and protocols necessary to protect individuals’ private information …,” the lawsuits claim.

AVP and Barnet Dulaney Perkins Eye Center PC agreed to pay $725,000 in a now-closed settlement resolving a class action that claimed they discriminated against patients with disabilities who required transport assistance, a violation of the Americans with Disabilities Act (ADA).

Was your personal data compromised in the AVP data breach? Let us know in the comments.

The David Yaeger class is represented by Cristina Perez Hesano of Perez Law Group PLLC and Kenneth J. Grunfeld of Kopelowitz Ostrow Ferguson Weiselberg Gilbert.

The Steven Daley class is represented by Perez Hesano, Bryan L. Bleichner and Philip J. Krzeski of Chestnut Cambronne PA.

The Lakshminarasimha Moudgal class is represented by Perez Hesano, Terence R. Coates and Jonathan T. Deters of Markovits, Stock and DeMarco LLC.

The American Vision Partners class actions are Yaeger v. Medical Management Resource Group LLC d/b/a American Vision Partners, Case No. 2:24-cv-00414-JZB; Daley v. Medical Management Resource Group LLC d/b/a American Vision Partners, Case No. 2:24-cv-00415-SMB; and Moudgal v. Medical Management Resource Group LLC d/b/a American Vision Partners, Case No. 2:24-cv-00401-ROS, all in the U.S. District Court for the District of Arizona.

Read About More Class Action Lawsuits & Class Action Settlements:

• Golden Corral class actions allege company failed to safeguard employees’ data
• Change Healthcare cyberattack affects insurance submissions, prescription refills, more
• U-Haul data breach affects customers in US, Canada
• Big Brothers Big Sisters class action claims data breach compromised participant info