The University of Connecticut Health Center is being hit with a class action lawsuit over a data breach that exposed 326,000 current and former patients.

The lawsuit, which is seeking $5 million in damages, was filed last week on behalf of New London, Conn., resident Yoselin Martinez who alleges the university took months after the incident took place and should have done more to prevent the breach, according to Law.com. Martinez claims her bank account became overdrawn due to her information being leaked in the breach.

 The data breach was discovered in December 2018 when an unauthorized actor gained access to an employee’s email account possibly compromising some personal information, including some individuals’ names, dates of birth, addresses and limited medical information, such as billing and appointment information. The accounts also contained the Social Security numbers of some individuals.