Two SAG-AFTRA members named Matthew Rouillard and Kristy Munden, have filed a class action lawsuit against the SAG-AFTRA Health Plan, alleging inadequate safeguards to prevent a recent data breach. The lawsuit, filed on 5 December in the U.S. District Court in Los Angeles, seeks class action status on behalf of affected members.
The lawsuit claims that the health plan failed to adhere to industry standards for data protection, exposing sensitive personal information. “SAG Health failed to protect the very customer information it was entrusted, compromising the personal information of an undisclosed number of its members,” the plaintiffs stated.
Among the alleged impacts are out-of-pocket expenses for identity theft prevention, detection, and remediation, as well as an increased risk of fraud. The suit also accuses the health plan of failing to provide timely notice of the breach to affected individuals.
The legal action alleges violations of California’s unfair competition law, the Confidentiality of Medical Information Act, negligence, and invasion of privacy, among other claims. Plaintiffs are seeking enhanced security protocols, independent third-party security audits, and monetary damages, including punitive compensation.
The SAG-AFTRA Health Plan, distinct from the union itself, responded with a statement emphasizing their commitment to data security:
“While we are unable to comment on any pending litigation, protecting the privacy and security of plan participants’ information is a critical priority, and we take this matter very seriously. Upon discovering unauthorized access to the contents of a single employee’s email account, we immediately contained and remediated the access and launched an investigation with the assistance of third-party experts. We sincerely regret any concern or inconvenience this may have caused and remain committed to maintaining the trust of our participants.”
About Author
Leave a Reply