A recent ruling by the U.S. Court of Appeals for the Fourth Circuit provides some additional insight into what insurance companies are required to do following a data breach. The case – Travelers Indemnity Co. of America v. Portal Healthcare Solutions – relates to a breach that resulted in medical records made available for viewing on the Internet for over four months.
Impacted patients filed a lawsuit against Portal Healthcare Solutions, an electronic medical records company, which was insured by Travelers. Portal sued Travelers over whether Travelers had to defend the class-action lawsuit.
