The litigation, led by Ada Louise McHenry, targets both the healthcare provider and its third-party case management vendor, Xsolis. According to the court filing, the breach exposed a wide range of private data, including Social Security numbers, dates of birth, treatment histories, and physician details. The suit contends that the defendants failed to maintain reasonable cybersecurity safeguards and neglected their duty to provide timely notification, leaving patients vulnerable to identity theft and medical fraud for over 130 days.

Derek Potts, managing partner at Potts Law Firm, emphasized that the core of the grievance lies in the breach of trust inherent in the patient-provider relationship. The petition seeks both damages and injunctive relief to hold the organizations accountable for the delayed disclosure. Plaintiffs are currently advised to retain all correspondence from the health system and to maintain strict oversight of their financial and medical accounts as the case proceeds under Cause No. 52545-A.