Mason LLP was the first to file a Class Action Lawsuit against Regal Medical Group, Inc., (“Regal”) in Federal Court on February 13, 2023. Regal is a healthcare provider located in Southern California with multiple locations, which was the target of a data breach. This breach resulted in the Private Information of over 3.3 million people being exfiltrated and now in the hands of cybercriminals. Regal sent out notice letters to people affected that their Social Security numbers, dates of birth, addresses, diagnoses, treatment information, laboratory test results, prescription data, radiology reports, health plan member numbers, and phone numbers may have been accessed and stolen. Regal failed to have adequate data security for its computer systems, so cyber criminals could easily access the Private Information of many people tied to Regal. Data breaches make it easier for those affected to become victims of identity theft and fraud. They will have to spend time and money now and, in the future, to mitigate those risks that could have been avoided.
Regal allowed almost a week of unimpeded access to its servers before realizing there was a data breach. This came to this conclusion days after employees had a hard time accessing their computer network. Their locations provide general and family practice physicians, pediatricians, internal medical physicians geriatric medicine physicians, etc. They also have urgent care centers, and hospitals, and hold virtual health and wellness classes. Upon information and belief, the exact amount of people affected by this breach is well over 3 million.
