Bell Law, LLC has filed a class action lawsuit over the Autumn View Gardens breach. The suit, filed in the Circuit Court of Jackson County, Missouri, names Bethesda Foundation and Autumn View Gardens as defendants. A cybersecurity incident exposed sensitive personal identifying information (PII) and protected health information (PHI). As a result, the exposure affected current and former employees, residents, and workers’ compensation claimants.
You or a family member may have received a breach notification letter from Autumn View Gardens or Bethesda Foundation. If so, cybercriminals may have exposed your most sensitive personal and medical data.
Details of the Autumn View Gardens Data Breach
An unauthorized actor gained access to the email systems of Autumn View Gardens and Bethesda Foundation. Specifically, this occurred between August 19, 2024, and September 18, 2024. During this intrusion, the unauthorized party could access emails containing extensive personal, financial, and medical records.
The exposed information includes, but is not limited to:
- Full names and dates of birth
- Social Security numbers
- Financial account numbers
- Medical record numbers (MRN) and Medicare numbers
- Health insurance account details
- Medical diagnoses, clinical data, and treatment/procedure records
- Prescription information and healthcare provider details
Unreasonable Delays in Autumn View Gardens Breach Notification
Autumn View Gardens detected the suspicious activity on September 18, 2024. The facility did not begin mailing notification letters to affected individuals until February 28, 2025. That is a delay of more than five months.
This delay left thousands of individuals unaware of the danger. Their Social Security numbers and private medical records were in the hands of third party cybercriminals. Without timely notice, victims lost the chance to freeze their credit and alert financial institutions. They also could not guard against medical identity theft during this critical exposure window.
Autumn View Gardens offered affected individuals 12 months of single bureau credit monitoring. However, a single year of basic monitoring is often insufficient. Stolen Social Security numbers and comprehensive health profiles create a lifelong threat that a short monitoring period cannot fully address.
Legal Claims Following the Autumn View Gardens Breach
The lawsuit alleges that Bethesda Foundation and Autumn View Gardens failed to implement industry standard cybersecurity measures. These measures include proper email encryption, mandatory multifactor authentication, and timely system patching. Additionally, the lawsuit claims these failures left sensitive data unprotected.
The lawsuit seeks to hold the defendants accountable under several legal theories, including:
Negligence & Negligence Per Se: Failure to maintain reasonable security safeguards in violation of common law duties and Section 5 of the FTC Act.
Breach of Implied Contract: Breaching implied agreements to keep sensitive personal and medical data secure. This also includes the duty to provide prompt notice after an intrusion.
Breach of Fiduciary Duty & Breach of Confidence: Disclosing highly private PII and PHI without authorization due to inadequate security practices.
Injunctive Relief: Requesting court orders to compel the defendants to overhaul their cybersecurity practices and conduct regular security audits. The lawsuit also asks the court to order defendants to securely purge unnecessary personal data.
What Should You Do If You Received a Notice Letter?
If you received a data breach notification letter from Autumn View Gardens, Bethesda Foundation, or Cyberscout regarding this incident:
- Keep Your Notification Letter: Store the letter and any accompanying materials in a safe place. They serve as documentation of your involvement.
- Monitor Your Accounts & Credit Reports: Place a fraud alert or security freeze on your credit files with Equifax, Experian, and TransUnion. Request free copies of your credit reports at AnnualCreditReport.com.
- Review Explanation of Benefits (EOB) Statements: Check healthcare statements closely for unauthorized treatments, procedures, or prescriptions billed under your name or Medicare number.
- Contact Bell Law, LLC: You may be entitled to compensation for lost time and out of pocket expenses. You may also be entitled to compensation for the heightened lifetime risk of identity theft.
Contact Our Team
Bell Law, LLC is dedicated to holding corporations accountable when they fail to protect sensitive personal and health information.
Do you want to discuss your rights, or learn more about this lawsuit against Bethesda Foundation and Autumn View Gardens? Contact our Kansas City office today:
Phone: (816) 886-8206
Email: [email protected]
Office Location: 2600 Grand Blvd., Suite 580, Kansas City, MO 64108
Call us at (816) 886-8206 or contact us online to schedule your free consultation.
This blog post is for informational purposes only and does not constitute legal advice. Every situation is different, and results depend on the specific facts of your case. Contact Bell Law to discuss your individual circumstances. The choice of a lawyer is an important decision and should not be based solely upon advertisements. This disclosure is required by rule of the Supreme Court of Missouri.
