Cigna's headquarters in Bloomfield, Connecticut. Credit: JHVEPhoto

A class-action lawsuit filed in mid-December alleges that The Cigna Group failed to adequately secure and protect patient information that was exposed in a data breach. Lopez v. The Cigna Group was filed in the U.S. District Court for the District of Connecticut.

The plaintiff, Karina Lopez, alleges that her personal information was exposed in a data breach that occurred between October 2024 and November 2025. The breach allegedly involved an unauthorized actor accessing the network of one of Cigna’s vendors and removing data such as names, health care IDs, dates of service, treatment costs and claims numbers, the website Top Class Actions reported. Lopez alleges that Cigna failed to implement reasonable security measures to protect patient data and that the company took too long to notify affected individuals of the breach.

As a result, Lopez and other affected individuals have incurred damages such as identity theft; lost time and expenses from mitigating harms; increased risk of harm; damaged credit; deprivation of the value of private information; loss of privacy; and other damages, according to the lawsuit. The plaintiff further claims that her personal information now is available on the dark web and that she and other affected individuals face increased risk of identity theft.

Lopez seeks to represent anyone in the United States whose personally identifiable information and protected health information may have been compromised. The lawsuit asks for certification of the class action, damages, fees, costs and a jury trial.

Earlier last month. Cigna Health and Life Insurance Co. settled a class-action lawsuit for slightly more than $1 million. The plaintiffs alleged that the insurer misclassified out-of-network providers as in-network. The settlement covers individuals insured by a LocalPlus plan for which Cigna provided administrative services. Because of mistakes in how the plan’s benefits were configured, after undergoing treatment, Cigna misclassified out-of-network health care providers as in-network, the lawsuit said. This allegedly caused consumers to be undercompensated for their medical expenses.

The amount each class member receives will depend on several factors, including the number of people who submit claims and the amount of each person’s balance bill.

NOT FOR REPRINT

© Arc, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to TMSalesOperations@arc-network.com. For more information visit Asset & Logo Licensing.