Class-action lawsuit targets UPMC, software company for big data breach

PITTSBURGH — UPMC and a software vendor should provide 25 years of credit and bank monitoring services, credit restoration services and identity theft insurance to the 27,000 UPMC employees whose personal information was compromised during a data breach discovered earlier this year, one of the employees says in a federal class-action lawsuit filed Friday.

This article was written by Channel 11's news exchange partners at TribLIVE.

Alice Patrick of McKeesport, a dialysis clinician at UPMC McKeesport, says the medical giant and the Ultimate Software Group Inc. of Weston, Fla., were negligent in the security measures they took to provide employee information. A spokeswoman for Ultimate Software couldn't immediately be reached for comment.

Ultimate Software processes UPMC's payroll, the lawsuit says. The company and UPMC failed to meet Federal Trade Commission standards for protecting data by using inadequate login, encryption and firewall protections, the lawsuit says.

Patrick's lawyer and a UPMC spokeswoman couldn't immediately be reached for comment.

WPXI