A recent class action lawsuit has been filed against a healthcare provider for allegedly failing to protect sensitive personal information in a data breach. The complaint was filed by Celia Cuevas on April 30, 2025, in the United States District Court for the Northern District of Illinois against Medical Express Ambulance Inc., operating as MedEx Ambulance.
The lawsuit centers around a data breach that was publicly disclosed by MedEx on April 14, 2025. According to the complaint, MedEx failed to secure and safeguard personally identifiable information (PII) entrusted to them by their patients and employees. This breach exposed sensitive data such as full names, dates of birth, Social Security numbers, and driver’s license or state ID numbers. The plaintiff claims that MedEx became aware of the security incident on March 18, 2024, but did not notify affected individuals until nearly a year later. During this time, unauthorized third parties may have accessed and acquired sensitive personal information from MedEx's IT network.
Cuevas accuses MedEx of negligence in failing to implement adequate security measures despite being aware of the risks associated with cyberattacks. She argues that MedEx breached its duty to protect confidential information under various statutory and regulatory obligations. Furthermore, Cuevas asserts that MedEx's delay in notifying affected individuals exacerbated the potential harm caused by the breach.
The plaintiff is seeking several forms of relief from the court. These include damages for financial losses resulting from identity theft and fraud due to the data breach, compensation for lost time spent mitigating these risks, and restitution for overpayment for services without adequate data security. Additionally, Cuevas requests an order declaring that MedEx's conduct violated applicable laws and seeks an award covering attorneys' fees and litigation expenses.
Representing Cuevas are attorneys Brandon M. Wise from Peiffer Wolf Carr Kane Conway & Wise LLP based in St. Louis, Missouri; Courtney E. Maccarone; and Melissa G. Meyer from Levi & Korsinsky LLP based in New York City. The case has been assigned Case No.: 1:25-cv-04735 in front of judges at the United States District Court for the Northern District of Illinois.