John Funkhouser is suing Exact Sciences Corp., Epic Systems Corp. for failing to properly secure and safeguard personally identifiable information and protected health information resulting in a data…

In a recent class action lawsuit filed in the United States District Court for the Western District of Wisconsin, plaintiff John Funkhouser has accused Exact Sciences Corp. and Epic Systems Corp. of failing to adequately protect sensitive personal information. The complaint alleges that between September 2024 and May 2025, hackers accessed Epic’s email and network systems, stealing personally identifiable information (PII) and protected health information (PHI) of patients using Exact Sciences’ services. This breach allegedly resulted in significant harm to Funkhouser and other affected individuals, including identity theft risks and emotional distress.

The lawsuit claims that the defendants failed to implement industry-standard security measures to protect this data, resulting in unauthorized access by cybercriminals. Despite discovering the breach in May 2025, the defendants reportedly delayed notifying affected individuals until August 2025, further exacerbating potential damages. Funkhouser seeks damages for negligence, invasion of privacy, unjust enrichment, and demands equitable relief requiring improved data security practices from the defendants.