A federal judge has rejected an effort by Ohio Medical Alliance LLC to dismiss a consolidated class action stemming from the exposure of nearly one million records tied to Ohio Marijuana Card, allowing the litigation to move forward.
U.S. District Judge Pamela A. Barker of the U.S. District Court for the Northern District of Ohio issued the ruling Tuesday, September 8, denying the company’s motion to dismiss the consolidated complaint.
The case, In re Ohio Marijuana Card Data Breach Litigation, combines six proposed class actions filed against Ohio Medical Alliance, which does business as Ohio Marijuana Card. Barker consolidated the cases in November 2025 after finding that they arose from the same alleged data-security incident.
The lawsuits followed the discovery of databases containing 957,434 records and approximately 323 gigabytes of information. The exposed material reportedly included driver’s licenses and other identification documents, medical records, physician certification forms, Social Security numbers, mental health evaluations and more than 210,000 email addresses.
The Marijuana Herald reported on the exposure in August 2025 after cybersecurity researcher Jeremiah Fowler discovered the databases were accessible without password protection or encryption. Fowler notified Ohio Medical Alliance, and the databases were subsequently taken offline.
Plaintiffs allege Ohio Medical Alliance failed to adequately safeguard personally identifiable and protected health information entrusted to the company. The litigation seeks damages and other relief over the alleged security failures.
The case is No. 1:25-cv-01765.
Related posts:
Federal Appeals Court Finds Louisiana Marijuana Conviction Wrongly Used to Enhance Sentence, but Ref...
New York Court Upholds Marijuana Tracking Requirements, Dismisses Separate Enforcement Lawsuit
