A mobile mammography provider is facing a wave of class action lawsuits after disclosing that personal and health information for more than 350,000 patients was compromised in a data breach discovered seven months ago. Seven separate patients have filed complaints against Onsite Mammography LLC in Massachusetts federal court following the company’s recent disclosure of the October 2024 incident.
The breach occurred when an unauthorized actor gained access to an employee’s email account, which contained health-related patient information. While the access was limited to the email account rather than other company systems, the incident affected 357,265 people according to a notice filed with the Maine attorney general’s office.
Delayed Disclosure and Patient Impact
Onsite Mammography, headquartered in Westfield, Massachusetts, operates in 26 states and partners with healthcare providers to offer in-office breast health and imaging services. The company discovered the breach in October 2024 following an investigation into unusual activity associated with the employee’s email account, but patients didn’t receive breach notifications until last month.
One plaintiff, Wanda Klingbail of Michigan, claims she has experienced increased spam calls since the incident and identified two unauthorized transactions on her credit cards. She also reports suffering from fear and anxiety related to the breach. “Klingbail anticipates spending considerable time and money on an ongoing basis to try to mitigate and address harms caused by the Data Breach,” her complaint states.
The lawsuits argue that Onsite promised to keep private patient information safe and confidential but failed to implement adequate security measures. Onsite has offered affected patients a year of credit monitoring and identity protection services.
Legal Representation
The seven plaintiffs seeking class certification are represented by multiple law firms, with Siri & Glimstad LLP attorneys Christina Xenides and Tyler J. Bean representing three of the cases. The other plaintiffs are represented by firms including Levi & Korinsky LLP, Houlihan Law LLC, and Milberg Coleman Bryson Phillips Grossman PLLC.
The multiple lawsuits are likely to be consolidated into a single action, with all cases being heard by U.S. District Judge Katherine A. Robertson. The plaintiffs come from various states including Virginia, Michigan, South Carolina, Alabama, and North Carolina, reflecting Onsite’s multi-state operations.