The breach occurred March 3, 2022, with unauthorized individuals accessing the names, dates of birth, Social Security numbers, phone numbers, treatment activity, treatment provider, treatment date, treatment location and payer information of nearly 30,000 patients.
The lawsuit alleges Allwell was negligent for not adequately securing patient data, which the company denies, the report said.