Consonus Healthcare Services Faces Lawsuit Over Delayed Data Breach Disclosure A former employee of Oregon-based Consonus Healthcare Services has filed a class-action lawsuit against the company, alleging a three-month delay in notifying affected individuals about a data breach that exposed sensitive personal information. The breach, which occurred in early August 2024, compromised the data of approximately 4,800 current and former employees and job applicants, including names, Social Security numbers, and other identifying details. The lawsuit, filed in U.S. District Court in Portland, claims Consonus—part of Marquis Companies, a senior living chain—failed to implement adequate cybersecurity measures, leaving victims vulnerable to lifelong risks of identity theft and fraud. The company reportedly detected the breach on August 17 but did not notify Oregon’s attorney general or affected individuals until November, nearly three months later. Plaintiff Gaurav Kaushik, a former program manager who worked for Consonus from 2021 to 2024, alleges the company was negligent in securing its systems, failing to monitor for intrusions or comply with industry cybersecurity standards. The stolen data could be exploited for financial fraud, medical identity theft, tax fraud, and other criminal activities, according to the complaint. Consonus offered affected individuals short-term credit monitoring, which the lawsuit dismisses as insufficient given the permanent risks posed by the breach. The notice also allegedly lacked critical details, including the root cause of the breach, exploited vulnerabilities, and remedial actions taken. The lawsuit seeks monetary damages, lifetime credit monitoring, and identity theft insurance for victims. Neither Consonus nor the plaintiffs’ legal representatives have publicly commented on the case. Consonus provides services to rehabilitation and senior care facilities across eight states, including Oregon, Washington, and California.