Lawsuit Filed Over Contact Tracing Data Breach A federal lawsuit has been filed against Pennsylvania and a vendor contracted by the state's Department of Health (DOH) over a data breach that exposed the personal health information (PHI) of thousands of Pennsylvanians. The DOH hired Atlanta-based company Insight Global in 2020 "to provide contact tracing and other similar services" following the outbreak of COVID-19. The Department later said that employees of the company caused a data breach by creating "unauthorized documents outside of the secure data systems created by the Commonwealth." Information exposed in the data breach included names, phone numbers, and medical information belonging to 72,000 individuals.