Medical Equipment Firm Accused of Lax Security After 2023 Breach

A New York medical equipment provider was sued after an unauthorized user gained access to its network for a month in 2023, allegedly exposing 56,000 patients’ unredacted and unencrypted private health data.

Advanced Recovery Equipment and Supplies LLC didn’t adequately protect confidential personal information or notify victims until 15 months after the data breach, according to a proposed class action filed Monday in the US District Court for the Eastern District of New York. The company faces five counts, including negligence, breach of implied contract, and invasion of privacy.

Advanced Recovery provides equipment including cold therapy unit machines and home ...

AI-powered legal analytics, workflow tools and premium legal & business news.

Log in to keep reading or access research tools.