KANSAS CITY – A class action lawsuit filed in U.S. District Court in Kansas City, Kansas, alleges that a physical therapist with the University of Kansas Health System improperly accessed medical records—including potentially nude clinical photos—of more than 400 patients from an unaffiliated facility, Plastic Surgery Specialists of Lawrence.
The therapist, who had no connection to the patients or Lawrence Memorial Hospital, reportedly used KU Health credentials to access records via Epic Systems' portal between February 2021 and February 2023.
The suit, brought by two patients identified as Jane Doe #1 and #2, claims KU Health sent breach notices in April 2023 but withheld details about the nature of the compromised information.
KU Health, LMH, and Epic are named as defendants in the case, which seeks damages for negligence, privacy violations, and other claims.
A court date has not yet been scheduled.




