A class action lawsuit has been filed against the Pennsylvania Department of Health alleging the agency is liable for failing to properly secure personal information related to contact tracing exposed through a data breach.

The lawsuit was filed in the U.S. District Court for the Middle District of Pennsylvania by plaintiff Lisa Chapman against defendants DOH and Insight Global, a staffing agency that contracted with the state to provide contact tracing analysis.