Scope of UPMC Data Breach Grows


February 28, 2014

The number of employees affected by the recent UPMC data breach and identity theft scheme may be even higher than originally predicted. The company publicly acknowledged on Wednesday that 22 of its employees had been affected. Concerned workers who spoke to our firm over the past week confirmed at least 50 affected employees at one location as well as numerous instances at a second location. As of Friday, we have confirmed victims at multiple UPMC facilities and from multiple departments.

Employees associated with Children’s Hospital of Pittsburgh, Western Psychiatric Institute and Clinic, UPMC McKeesport, Magee-Womens Hospital of UPMC, and the Hillman Cancer Center have come forward to identify as victims in this scheme. We have also heard from UPMC workers in the insurance division of the company and even from former employees who no longer work there.

UPMC is the largest private employer in Pennsylvania, with over 62,000 workers. It is not yet clear exactly how many of those workers have been directly affected by the data breach, but reports from so many different areas of the company indicate that the final number could be in the hundreds or thousands.

Kraemer, Manes & Associates LLC filed a class action lawsuit Thursday on behalf of all affected UPMC employees. Workers blame UPMC  for the data breach that lead to the identity theft scheme. Apparent vulnerabilities in the UPMC system allowed confidential personnel data to be stolen.

KM&A is a law firm headquartered in Pittsburgh focusing on business law, employment law, and litigation. The firm’s clients include small businesses, employers, employees, and civil litigants.

Additional information about this lawsuit can be found at the dedicated information page or by contacting us at