Data Breach Summary
Jackson Health System (JHS) has confirmed a data breach involving the unauthorized access of over 2,000 patient records by a former employee, marking yet another serious privacy incident for one of Florida’s largest public health networks.
The breach, which occurred between July 2020 and May 2025, was uncovered through an internal investigation and prompted swift action from the organization. Affected individuals are advice to remain vigilant by monitoring their accounts, reviewing medical and insurance statements, and reporting any suspicious activity.
According to JHS, the employee improperly accessed protected health information (PHI) — including patient names, birthdates, addresses, medical record numbers, and clinical details — and used it to promote a personal healthcare business. Fortunately, no Social Security numbers were involved in the breach.
Upon discovery of the unauthorized access, the employee was immediately terminated. Jackson Health System has notified affected patients and is fully cooperating with law enforcement to investigate potential criminal violations tied to the incident.
“Jackson Health System is committed to protecting patient privacy and addressing any potential breach with urgency and transparency,” the hospital system stated in its public notice.
This latest incident follows a history of HIPAA-related issues at JHS. In 2019, the U.S. Department of Health and Human Services Office for Civil Rights (OCR) imposed a $2.15 million civil penalty on JHS for multiple HIPAA violations, including:
Failing to report lost patient records affecting over 1,400 individuals in a timely manner.
Unauthorized access to patient data by employees without legitimate work purposes.
A prolonged insider threat where one employee accessed and sold over 24,000 patient records between 2011 and 2016.
OCR’s investigation at the time revealed systemic compliance failures, such as lack of enterprise-wide risk analysis, failure to manage access controls, and insufficient breach notification practices.
The data breach may have affected the following for various patients:
Names, addresses, email addresses, and phone numbers
Dates of birth, medical diagnoses, and treatment details
Health insurance data
Social Security numbers, in limited cases
Enroll in the free credit monitoring and identity restoration service offered.
Check credit reports (available free once per year from Equifax, Experian, and TransUnion) for unusual activity.
Consider placing a fraud alert or credit freeze if SSN or insurance data was involved.
Stay alert for suspicious communications or fraud attempts.
Utilize state-specific resources, such as the MD Attorney General’s identity theft resources, if applicable
Following the breach, Jackson Health System faces potential class-action lawsuits from patients alleging negligence in protecting personal data. Data breach lawsuits often claim companies failed to implement adequate security measures or delayed disclosure of breaches, thereby increasing victims’ risk of financial and identity theft damages.
Affected users may be entitled to compensation for costs related to identity monitoring, fraudulent transactions, lost time addressing the breach, and emotional distress.
If you were impacted by the Jackson Health System data breach, you may have the right to seek compensation for the potential harm caused. Class Action U is dedicated to helping data breach victims connect with skilled attorneys who specialize in this area of law and can guide you through the legal process.
Individuals whose personal information was exposed may have valid grounds to join a class action lawsuit, allowing them to pursue restitution.
If your data was compromised, you could be entitled to compensation for:
Loss of privacy
Time spent resolving the breach
Out-of-pocket expenses
Emotional distress
By pursuing a class action lawsuit, you not only have the opportunity to recover damages but also help hold Jackson Health System accountable, potentially prompting them to strengthen their security measures. Reach out to Class Action U today to find out if you qualify for a data breach class action and learn more about the compensation you may be entitled to.
©2024 ClassActionU
