The Surfside Non-Surgical Orthopedics in Boynton Beach, Florida, has filed a lawsuit against Allscripts after a ransomware attack left the practice without online access for a week.

“As a result of the ransomware attack experienced by Allscripts and as further described below, [the] plaintiff could not access its patients’ records or electronically prescribe medications, forcing plaintiff to cancel appointments, thereby causing significant business interruption and disruption, and lost revenues,” stated the lawsuit. “Additionally, [the] plaintiff has expended significant time and effort resolving these issues resulting from the breach, including communicating with patients to reschedule appointments.”

Surfside alleges Allscripts was negligent for failing to protect against the attack and breached its contract.

“Healthcare industry knowledge and awareness of the widespread issues with SamSam ransomware have been known since at least as early as March 2016,” stated the lawsuit. “Allscripts disregarded plaintiff’s and class members’ rights by intentionally, willfully, recklessly, and/or negligently failing to take adequate and reasonable measures to implement, monitor, and audit its data systems, which could have prevented or minimized the effects of the SamSam ransomware attack it experienced in January.”