Postmeds class action alleges data breach compromised customer personal, health info

Postmeds data breach class action overview: 

• Who: Postmeds, doing business as Truepill, is facing a class action lawsuit from Plaintiffs John Rossi, Michael Thomas and Marissa Porter over a data breach. 
• Why: The Postmeds data breach happened before Aug. 31, with clients’ medical prescription information and physician compromised attached to a name and demographic information.
• Where: The Postmeds data breach class action was filed in California.

Postmeds Inc., which does business as Truepill, is facing a class action lawsuit over a late August data breach that compromised customers’ names, demographic information and prescription information.

The company sent letters to customers about the data breach on Oct. 30 and filed notice of the hacking incident with the attorney general of Texas on Oct. 31.

Postmeds said it detected unusual activity in its system Aug. 31 and found that an unauthorized user had accessed its computer systems between Aug. 30 and Sept. 1. That access included sensitive patient information, the class action said.

Postmeds data breach included names, prescription and physician information, lawsuit says

The accessed data that Postmeds collected includes names, demographic information, prescription information, medication type and the names of prescribing physicians.

“Plaintiffs and ‘Class Members’ were, and continue to be, at significant risk of identity theft and various other forms of personal, social, and financial harm,” the Postmeds class action says. “The risk will remain for their respective lifetimes. The private information compromised in the data breach contained highly sensitive patient data, representing a gold mine for data thieves.”

Plaintiffs John Rossi, Michael Thomas and Marissa Porter claim Postmeds did not properly safeguard the sensitive information and did not have proper systems in place to prevent a breach or theft of patients’ medical information and prescriptions.

The Federal Trade Commission (FTC) will now be requiring non-bank financial institutions to report data breaches and security incidents to the commission in the event the data of at least 500 consumers has been acquired without authorization. 

Were you affected by the Postmeds data breach? Let us know in the comments.

The plaintiff is represented by Kyle McLean, Mason Barney and Tyler Bean of Siri and Glimstad LLP.

The Postmeds class action lawsuit is Rossi, et al. v. Postmeds Inc. d/b/a Truepill, Case No. 3:23-cv-05732-KAW, in the U.S. District Court for the Northern District of California.

Read About More Class Action Lawsuits & Class Action Settlements:

• FTC to require more entities to report data breaches
• Williams-Sonoma class action claims Kronos hack affected employee pay
• Class action lawsuit alleges Francesca’s failed to protect customer, employee info during data breach
• Judge preliminarily approves Wawa data breach settlement