{"id":6960,"date":"2014-05-16T11:47:10","date_gmt":"2014-05-16T18:47:10","guid":{"rendered":"http:\/\/www.infosecurity.pro\/?p=6960"},"modified":"2019-04-20T16:24:35","modified_gmt":"2019-04-20T16:24:35","slug":"lawsuit-against-university-of-pittsburgh-medical-center-upmc-and-ultimate-software-group","status":"publish","type":"post","link":"https:\/\/www.infosecurity.pro\/?p=6960","title":{"rendered":"Lawsuit against University of Pittsburgh Medical Center (UPMC) and Ultimate Software Group"},"content":{"rendered":"<p>\t\t\t\t<![CDATA[A class action lawsuit seeking damages and protection for employees affected by a breach of confidential data was filed in federal court.\u00a0 It targets both the University of Pittsburgh Medical Center (UPMC) and a payroll software company the Ultimate Software Group. The lawsuit that was filed claims that the UPMC, as well as the human resources vendor \u201cUltimate Software\u201d, violated federal guidelines and also failed to meet the standards for the data security industry. This was for failing to adequately secure each employee\u2019s personal and financial pieces of information. This means any negligence or breach of the said contracts between both the UPMC entities and the employees. The lawsuit indicates that damages could exceed $5 million.\u00a0 It also suggests that the victims may live in fear of other forms of identity theft since their Social Security numbers and other identifying information have been captured with risk to exploitation.\u00a0 <img decoding=\"async\" style=\"width: 220px; height: 232px; float: right;\" src=\"http:\/\/www.degreepivot.com\/wp-content\/uploads\/2011\/08\/upmc.png\" alt=\"University of Pittburgh Medical Center\" \/> The company and UPMC failed to meet Federal Trade Commission standards for protecting data by using inadequate encryption, login and firewall protections. Also the lawsuit claims that the defendants had a duty to protect the highly sensitive, private, confidential personal and financial information and the tax documents and failed to safeguard and prevent vulnerabilities from being taken advantage of. The Pittsburgh Post-Gazette reports that the University of Pittsburgh Medical Center is facing a class action lawsuit over a recent data breach that may have exposed as many as 27,000 employees&#8217; tax information. The UPMC has admitted that the personal and financial information of more than 27,000 workers was compromised and that at least 788 of those have already been the victims of tax fraud. A UPMC employee started taking her class-action lawsuit when it came to a data breach involving the medical system to state court because a Florida software company was not involved in the situation, her lawyer stated on Tuesday. The employee named as the lead plaintiff Alice Patrick works as a dialysis clinician, located in the UPMC McKeesport. Both the attorneys who filed the lawsuit on her behalf and representatives of UPMC declined to be interviewed for this. The lawsuit stated that Ms. Patrick was one of the 788 employees who according to UPMC were such victims of the tax return fraud, and in result of the breach. In addition to this, an attorney seeking to represent all of the victims of a breach of UPMC personnel data claimed Saturday that the damage from the compromise of personal information has yet to be calculated and could continue to worsen. The lawsuit against Ultimate Software and UPMC seeks monetary damages that is 25 years of credit monitoring and credit restoration for the affected employees and payment of fees and expenses associated with the litigation. UPMC Greenville workers had to file additional paperwork with the IRS and had to use accounting services provided by UPMC to make sure that anti-fraud measures are in place this year and for the next 5 years to protect their income tax refunds from fraud and theft. \u00a0A spokeswoman linked with the Florida company stated Monday that UPMC was not one of its payroll customers. Therefore, it was not involved in the data breach. <span id=\"docs-internal-guid-25593a08-065a-bc85-5c16-464fd4538907\" style=\"color: #000000; font-family: Arial; font-size: 15px; font-style: normal; font-variant: normal; font-weight: normal; text-decoration: none; vertical-align: baseline; background-color: transparent;\"><\/span>]]>\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\t\t\t\t<![CDATA[]]>\t\t<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"amazonpipp_noncename":"","amazon-product-isactive":"","amazon-product-single-asin":"","amazon-product-content-location":"","amazon-product-content-hook-override":"3","amazon-product-excerpt-hook-override":"3","amazon-product-singular-only":"","amazon-product-amazon-desc":"","amazon-product-show-gallery":"","amazon-product-show-features":"","amazon-product-newwindow":"2","amazon-product-show-list-price":"","amazon-product-show-used-price":"","amazon-product-show-saved-amt":"","amazon-product-timestamp":"","amazon-product-new-title":"","amazon-product-use-cartURL":"","amazon_featured_post_meta_key":"","_amazon_featured_alt":"","amazon-product-template":"","footnotes":""},"categories":[66,67],"tags":[],"class_list":["post-6960","post","type-post","status-publish","format-standard","hentry","category-breaches","category-practices"],"_links":{"self":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/6960","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6960"}],"version-history":[{"count":1,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/6960\/revisions"}],"predecessor-version":[{"id":7947,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/6960\/revisions\/7947"}],"wp:attachment":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6960"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6960"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6960"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}