IBM and Johnson & Johnson Clear Data Breach Lawsuit

IBM and Johnson & Johnson Health Care Systems Inc. have successfully defended against a class action lawsuit alleging they failed to protect personal information in a data breach.

The proposed class action claimed that IBM and Johnson & Johnson's failure to safeguard patient support program data led to a breach in 2023, exposing sensitive information.

However, US District Court for the Southern District of New York Judge Nelson S. Román ruled that the plaintiffs failed to demonstrate concrete injuries directly linked to the breach, a necessary condition for standing.

This decision reaffirms a previous March 2025 order dismissing the lawsuit on similar grounds.