A class-action complaint was filed against UPMC and UPMC McKeesport Thursday stating the company’s negligence led to a data breach and resulting identity thefts, now the subjects of a federal investigation.
Vulnerabilities in UPMC’s computer system allowed for the breach and the company did not reasonably safeguard the sensitive information in its care, according to the lawsuit filed by Kraemer, Manes & Associates in Common Pleas Court.
UPMC said Wednesday it believed 22 employees were “victimized” in a “common fraud scheme during tax season.”
The suit states that more than 50 employees’ information has been used to open bank accounts, file income tax returns or both, though it is anticipated more will become victims of fraud.
“This isn’t a theoretical breach. This isn’t some abstract game,” attorney Michael Kraemer said. “This information is actively being used to hurt the people whose identity was stolen.”
UPMC could not be reached for comment Thursday.
Lexi Belculfine: firstname.lastname@example.org or 412-263-1878. Twitter: @LexiBelc.