Sunflower Medical Group Facing Lawsuit Following January Data Breach

The lawsuit seeks a jury trial, damages, expanded credit monitoring services and security improvements at Sunflower Medical Group.

By Jeff Wardon, Jr., Assistant Editor


Sunflower Medical Group is facing a class action lawsuit following a data breach that exposed the protected health information of nearly 221,000 current and former patients, The HIPAA Journal reports. The breach occurred on December 15, 2024, but was not discovered until January 7, 2025. The compromised data includes names, addresses, Social Security numbers, medical records and health insurance details. 

The lawsuit alleges that Sunflower Medical Group failed to implement adequate security measures, did not follow FTC guidelines or HIPAA requirements and delayed notifying victims. 

Plaintiffs claim they face ongoing risks of identity theft, financial losses and lost time dealing with the fallout, according to The HIPAA Journal. The lawsuit seeks a jury trial, damages, expanded credit monitoring services and security improvements at Sunflower Medical Group. 

Sunflower Medical Group joins a growing list of healthcare organizations facing lawsuits over cyberattacks and data breaches. Other organizations such as Dameron Hospital Association and PIH Health have either settled their case or are currently undergoing litigation.  

Legal costs are but one price healthcare facilities and organizations may have to pay in the fallout of a cyber incident. Another cost is the damage done to an organization’s reputation, as they are trusted with all this sensitive information and then it winds up getting compromised.  

Take the case of Change Healthcare, where multifactor authentication (MFA) hadn’t been applied to a remote desktop access portal, allowing hackers to use compromised credentials to access their systems.  While a provider of revenue and payment cycle management for healthcare, the cyberattack they suffered rippled throughout the industry. 

“Given the hampered caregiving and operability due to the [Change Healthcare] breach, people’s opinions and trust will eventually decay to a point that is unfavorable for healthcare organizations and their facilities,” Errol Weiss, chief security officer at Health-ISAC, previously told Healthcare Facilities Today

Jeff Wardon, Jr., is the assistant editor of the facilities market.



March 31, 2025


Topic Area: Information Technology , Security


Recent Posts

Over 700 Hospitals at Risk of Closure

Hospitals are citing financial problems at the main cause of potential closure.


Astrana Health Fully Acquires Prospect Health

They completed the acquisition of Prospect Health for a total purchase price of $708 million.


Hospitals Recognized for Sustainability, Resilience Achievements

The 496 healthcare organizations have demonstrated leadership in sustainability, environmental stewardship and climate resilience.


Caravel Autism Health Opens New Therapy Clinic in Missouri

The clinic features colorful, sensory-friendly spaces.


On the Lookout: The Software Supply Chain as a Healthcare Cyberattack Vector

Staying watchful of third-party software vendors and their activities is critical for healthcare cybersecurity.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.