Two federal class-action lawsuits were filed against the DC Health Benefit Exchange Authority following a data breach that reportedly exposed health data of approximately 57,000 patients, including members of U.S. Congress, GovInfoSecurity reports. Both lawsuits allege the health provider "was negligent in failing to secure sensitive information of the plaintiffs and class members." One lawsuit alleges more than 500,000 individuals were impacted by the breach, while the other lawsuit claims between 56,000-107,000 people were affected.