A class action lawsuit has been filed against healthcare communication provider ConnectOnCall.com, LLC, accusing the company of failing to protect sensitive personal and health information, resulting in a significant data breach.
The complaint was filed by Pamela Giarrizzo in the U.S. District Court for the Eastern District of New York on December 18, 2024.
The case centers on allegations that ConnectOnCall.com mishandled Personally Identifiable Information (PII) and Protected Health Information (PHI) entrusted to them by healthcare providers and patients.
The breach reportedly exposed names, health conditions, treatments, prescriptions, phone numbers, dates of birth, and Social Security numbers.
The company publicly disclosed the breach on December 11, 2024.
Giarrizzo claims the breach resulted from inadequate security measures and negligence by the company. She alleges that although the company was aware of a security incident as early as May 12, 2024, it failed to take swift or effective action to prevent unauthorized access between February 16 and May 12 of that year.
Giarrizzo’s lawsuit seeks damages for negligence, negligence per se, unjust enrichment, breach of implied contract, and breach of confidence.
She argues that ConnectOnCall.com violated several statutory and regulatory obligations, including failing to implement reasonable security measures in line with industry standards and Federal Trade Commission guidelines.
Giarrizzo asserts that as a result of the breach, affected individuals face increased risks of identity theft and fraud.
The plaintiff is seeking damages for financial losses, compensation for time spent mitigating potential identity theft, restitution, pre-judgment interest, and any other relief deemed appropriate by the court. She also requests an order declaring ConnectOnCall.com’s conduct unlawful under relevant statutes.
Giarrizzo is represented by attorneys Courtney E. Maccarone and Mark Svensson of Levi & Korsinsky LLP. The case is being heard under Case ID: 2:24-cv-08648.