One emailed spreadsheet unlocked a federal class action and a Ninth Circuit ruling that changes how health data breaches play out in court.
In August 2023, IEC Group - a benefits administrator operating as AmeriBen - sent letters to two health plan members with an uncomfortable admission. An associate had emailed a spreadsheet containing their confidential health information to “one or more plan members.” The data that may have been exposed included names, provider names, claim numbers, dates of service, and amounts billed or paid.
The two plan members sued. They filed a class action in the US District Court for the District of Idaho, alleging negligence, breach of contract, breach of fiduciary duty, and unjust enrichment, among other claims. Their core argument: they had entrusted sensitive health data to IEC Group as a condition of plan administration, the company had promised through its privacy policy to keep it confidential, and it failed.
The district court threw the case out. It found the plan members had not suffered an “injury in fact” - the concrete harm required under Article III of the Constitution before a federal court can hear a case. Without proof of downstream damage like identity theft or financial loss, there was no standing to sue.
The Ninth Circuit saw it differently. In a decision filed on October 9, 2026, a three-judge panel reversed, holding that the unauthorized disclosure of sensitive health information entrusted under a confidential relationship...
AURORA, Mo. (WKRC) — A Missouri woman is facing a child abuse charge after investigators say her daughter described being pressured to make false allegations against her father during a custody di...