- Iowa AG Brenna Bird filed a lawsuit against healthcare claims clearinghouse Change Healthcare Inc. and its owners and operators alleging that cybersecurity and breach-response failures during a 2024 cyberattack violated the Iowa Consumer Fraud Act and the Personal Information Security Breach Protection Act.
- The petition claims the companies used outdated, insecure systems that lacked basic safeguards, leaving them vulnerable to an attack that affected about 2.2 million Iowans, and that the resulting shutdown of Change’s services disrupted critical healthcare operations across the state and that defendants then delayed notice to affected consumers.
- The lawsuit seeks declaratory and injunctive relief, civil penalties, disgorgement, damages on behalf of injured persons, costs and fees, and other relief.
- Iowa’s petition follows a similar lawsuit filed by Nebraska in 2024, which we previously covered here.