Solara faces lawsuit over data breach

CHULA VISTA, Calif. - A patient has filed a class action lawsuit against Solara Medical Supplies, which recently disclosed a data breach that impacted about 114,000 patients.

The lawsuit, filed in the U.S. District Court of the Southern District of California, accuses Solara of failing to protect personal information, according to Health IT Security.

The lawsuit also accuses Solara of failing to notify patients in a timely manner. Per HIPAA, covered entities must report breaches impacting more than 500 patients within 60 days of discovering the breach.

Solara, a provider of diabetes testing supplies, says it discovered the breach on June 28 and notified patients in November. In its notice, the company stated that, between April 2, 2019, and June 20, 2019, an “unknown actor” used a phishing campaign to gain access to a limited number of employee Office 365 accounts.

Personal information that may have been present in the accounts at the time included first and last names and one or more data elements, including address, date of birth, Social Security number, Employee Identification Number and medical information.