Aetna has sued a plaintiffs firm and a consumer group in connection with a compounded privacy blunder that outed HIV patients and forced the company to pay out $17 million to those affected.

The insurance giant was originally sued in federal court in Philadelphia after it mailed notifications to patients about how to fill their HIV drug prescriptions that clearly identified them in envelope windows.