Health Systems Unite in Lawsuit Against Data Companies for Patient Privacy Violations

January 14, 2026 - 05:05

A coalition of health systems, including OCHIN, Reid Health, Trinity Health, and UMass Memorial Health, has filed a federal lawsuit against Health Gorilla and several data companies. The lawsuit centers on allegations of improper access and monetization of approximately 300,000 patient medical records.

The health systems claim that the defendants accessed sensitive patient information without proper authorization and exploited this data for financial gain. This legal action underscores growing concerns about the protection of patient privacy in the rapidly evolving landscape of electronic health records.

The plaintiffs argue that such practices not only violate patient confidentiality but also undermine trust in healthcare providers and the systems that manage their data. As the healthcare industry increasingly relies on digital records, the need for stringent safeguards and ethical practices in data management has never been more critical. The outcome of this lawsuit may set important precedents for how patient data is handled in the future.