The Pennsylvania Supreme Court has ruled that employers have a duty to protect employees from cyberattacks by setting:
- Employer Duty: “a legal duty to exercise reasonable care to safeguard”
- Remedy: a recovery for negligent behavior under the economic loss doctrine
Dittman v. UPMC, 2018 Pa. LEXIS 6051 (Pa. Nov. 21, 2018)