Patients of a Salina, Kansas diagnostic lab are a step closer to closure after a judge granted first approval to a settlement over a 2024 network intrusion. WPM Pathology Laboratory is the lab at the middle of the case, running cytology, molecular testing and anatomic pathology for the hospitals and clinics that send it work, and its close partner Salina Regional Health Center is named as a defendant alongside it.
The complaint, filed in Saline County District Court, accused the organizations of failing to apply reasonable safeguards before an unauthorized party reached the lab’s systems on or around November 4, 2024. Names and dates of birth were exposed, along with Social Security numbers. The haul also took in diagnosis details, medical record numbers and health insurance claims data.
Every count the suit raised was contested: the defendants denied each of the claims, negligence, breach of implied contract, unjust enrichment and invasion of privacy. From there the two sides explored an early resolution and negotiated at arm’s length without a mediator, striking a deal whose terms were not disclosed.
The case points at a vendor problem that recurs across healthcare delivery. Diagnostic labs sit inside hospital workflows and hold the identifiers attackers want most, so a lab’s security posture doubles as a hospital’s exposure.
