Plaintiff alleges healthcare tech company failed in securing sensitive data leading to potential identity theft

A recent court filing reveals a significant legal battle unfolding over a data breach that has left thousands of individuals vulnerable to identity theft and fraud. On November 18, 2025, Karin Dossett filed a class action complaint in the United States District Court for the District of Arizona against VirMedice, L.L.C., a healthcare technology company. The lawsuit accuses VirMedice of failing to secure sensitive personal and health information of its clients’ patients, including Dossett’s, which was compromised in a cyberattack by the ransomware group “Pear.”

The complaint details how VirMedice, which provides electronic health record solutions and medical data management services, collected sensitive patient information with an obligation to keep it confidential. However, on or around September 11, 2025, the company experienced a data breach that resulted in unauthorized access to files containing private information such as names, Social Security numbers, addresses, and medical records. Despite the severity of the breach, VirMedice has yet to publicly disclose any details about it.

Dossett alleges that VirMedice failed to implement reasonable security measures to protect this sensitive data from cybercriminals. The lawsuit claims that this negligence led to the exposure of personal information on the dark web and increased risks of identity theft for those affected. “Defendant’s woefully inadequate data security measures made the Data Breach a foreseeable consequence,” states the complaint.

In response to these allegations, Dossett seeks injunctive relief requiring VirMedice to enhance its security protocols and ensure better protection for remaining private information. Additionally, she demands compensation for damages suffered by herself and other class members due to identity theft threats and loss of privacy.

Representing Dossett is Cristina Perez Hesano from Perez Law Group PLLC along with additional counsel listed on the signature block. The case is being heard under Case No.: 2:25-cv-04322-ASB by judges from the District Court of Arizona.