Norton Healthcare Faces Investigation for Data Breach Impacting 2.5 Million Patient and Employee Records

Affected Persons Are Urged to Contact Schubert Jonckheer & Kolbe to Discuss Their Legal Rights

Schubert Jonckheer & Kolbe LLP is investigating a data breach impacting the sensitive personal and health information of 2.5 million patients and employees of Norton Healthcare, Inc., a Kentucky-based healthcare provider that operates hospitals and clinics in Kentucky and Indiana.

In May 2023, Norton learned of a cybersecurity incident which resulted in the unauthorized access of personal information in certain of its network storage devices. The incident was later determined to be a ransomware attack. The cybercriminal group ALPHV/BlackCat claimed credit for the data breach and boasted that it stole almost 5 terabytes of data.

The stolen information may have included names, contact information, Social Security numbers, dates of birth, health and insurance information, and medical ID numbers. In some instances, driver’s license numbers, government ID numbers, financial account numbers, and digital signatures may also have been accessed. Seven months after the breach, on December 8, 2023, Norton began sending notices of the breach to affected patients, employees, and their dependents.

Schubert Jonckheer & Kolbe is investigating whether Norton failed to adequately protect the private information in its care and provide timely notification of the data breach, in violation of state and federal laws. If your personal information was impacted by this incident, you may be at risk of identity theft and other serious violations of your privacy. As a result, you may be entitled to money damages and an injunction requiring changes to Norton’s cybersecurity practices.

If you received notification of this data breach or are a patient or employee of Norton Healthcare and wish to obtain additional information about your legal rights, please complete the form below for a free legal consultation.