A class action data protection lawsuit against Alabama-based Flowers Hospital ended in a $150,000 settlement in December 2018.
The lawsuit began in 2014 over allegations that the hospital failed to take adequate measures to prevent a former employee from selling patients’ personally identifiable information (PII) and protected health information (PHI), which were later used to file fraudulent income tax returns.