The complaint in federal court claims that the Atlanta-based maker of healthcare software was negligent and failed to meet standards for safeguarding information.

NextGen said in a statement to the newspaper that it knew about the breach, took steps to address it and that the threat actor’s access was “limited.”

Read the full article from The Atlanta Journal-Constitution.