Full Breakdown
Epic Systems Files Lawsuit to Protect Patient Privacy
1/13/2026, 8:18:36 PM
Legal Action Against Health Gorilla and Affiliates
Epic Systems, a leading provider of electronic health records (EHR), has initiated legal proceedings against Health Gorilla, a health information network, and several of its clients, including Mammoth and RavillaMed. The lawsuit, filed in federal court in California, alleges that these entities improperly accessed and monetized nearly 300,000 patient medical records from Epic's network, as well as an unspecified number of records from other organizations nationwide, including the Veterans Affairs (VA) and various EHR providers.
The lawsuit accuses the defendants of operating as "organized syndicates" that exploit patient records without consent. Specific allegations include requesting patient information under the pretense of providing medical treatment while actually using the data for marketing purposes, such as targeting potential claimants for mass tort or class action lawsuits. The complaint further claims that these entities obscure their true intentions through fictitious websites and shell companies, creating a façade of legitimate medical activity.
Implications for Patient Privacy and Care
Epic's legal filing emphasizes the potential risks to patient safety and the integrity of healthcare. It argues that the defendants' actions threaten the positive outcomes achieved through interoperability, which is intended to enhance patient care by ensuring that healthcare providers have access to comprehensive medical histories. The lawsuit warns that if these practices are not curtailed, the defendants will continue to exploit patient data for financial gain.
Background on Epic's Market Position
Epic Systems is the dominant player in the U.S. EHR market, managing a vast amount of patient data. The company has faced criticism in the past for its reluctance to share health records with other providers, a point that has been highlighted in an ongoing antitrust lawsuit filed by Particle Health. This lawsuit accuses Epic of using its market power to block access to health records, raising questions about the balance between patient privacy and data sharing in healthcare.
Criticism of the Defendants
Critics of Health Gorilla and its affiliates have pointed out that their alleged practices undermine trust in the healthcare system. The lawsuit's claims suggest a systematic approach to data exploitation that could have far-reaching consequences for patient confidentiality and the overall quality of care. The legal action taken by Epic is seen as a necessary step to protect patient rights and uphold the standards of medical practice.
Official Statements & Responses
Epic Systems has articulated its commitment to defending patient privacy and ensuring that sensitive medical information is not misused. The company’s legal complaint underscores the importance of maintaining the integrity of healthcare practices and protecting patients from unauthorized access to their medical records.
Verbatim Quotes
- “Operate as organized syndicates to monetize patient records without patients’ knowledge or consent.” — Epic Systems Legal Filing
- “These actors are putting the enormous positive patient outcomes achieved through interoperability at imminent risk,” — Epic Systems Legal Filing
What's Next
The lawsuit is expected to unfold in the coming months, with potential implications for how health information networks operate and how patient data is managed across the healthcare industry. The outcome may influence ongoing discussions about data privacy, interoperability, and the responsibilities of healthcare providers in safeguarding patient information.
