On May 17, 2021, Judge Gerald McHugh of the U.S. District Court for the Eastern District of Pennsylvania ruled that one plaintiff’s lawsuit out of three filed against Universal Health Services (UHS) over a 2020 data breach was allowed to proceed because the “Plaintiff’s injury is not speculative, as his financial expenditures allegedly occurred in response to the data breach.”
Plaintiff Stephen Motkowicz filed a complaint against UHS after his surgery was canceled due to a September 2020 ransomware attack against UHS where hacker group Ryuk infiltrated the hospital’s IT system and breached sensitive patient data.