Performance Health Technology Ltd. failed to protect the personal information of more than 1.7 million people that was exposed in a cyberattack on a file-transfer app, a proposed federal class action said.
Plaintiff Jordinn Ballard alleged that PHT failed to encrypt sensitive data, comply with industry data-security standards, dispose of data when it was no longer needed, or properly monitor its network to detect vulnerabilities and prevent attacks.
PHT, which provides customer service, enrollment, and payment services to community health plans, didn’t respond immediately to a request for comment.
The company identified the app in a June 2 breach-notification letter …