Community Health Systems has been hit with a class-action suit, the second after the health network was breached in August.

The latest suit, filed in the Fourth Judicial District Court in New Mexico by Briana Brito, said that because CHS failed “to implement and follow basic security procedures” Brito’s personal information ended up “in the hand of thieves,” iHealthBeat reported Tuesday. In August, Tennessee-based CHS announced that the personal information of more than four million patients could be at risk after attackers were able to exploit the Heartbleed bug sometime in April and June. A class action suit was filed against the health system in Alabama in August.

The breach has posed “a substantial increased risk of identity theft” to those affected, according to the latest suit, filed on behalf of Brito by law firms Slack & Davis and The Branch Law Firm.