New York AG Reaches Settlement of Up to $10 Million Over Health Data Breach Affecting 4.2 Million New Yorkers
New York Attorney General Letitia James announced on Nov. 6 that she and the attorneys general of Connecticut, Michigan and New Jersey had reached a settlement with five Perry Johnson companies, resolving an investigation into a March 2023 medical data breach. Investigators found that hackers used an employee's account to access the systems that March and stole personal and medical information relating to 13.3 million people, including about 4.2 million New Yorkers. The companies provide coding, billing and medical transcription services to health care providers nationwide. Under the settlement, the five companies must pay at least $300,000 in penalties to the four states within 14 days of the agreement taking effect, of which New York receives at least $100,000; violations of the terms or material misstatements of their finances would trigger an additional $9.7 million, for a maximum of $10 million. The companies must also implement stricter information-security and record-retention programs. James said health information is private and the companies entrusted with it have a duty to protect it. It is her fourth major health-data enforcement settlement this year, following the $18 million 23andMe case and the $2.3 million Labcorp case.
(Source: New York Attorney General's Office)
Source: New York Attorney General's Office
Published by GSM · USA (original Chinese edition)
Photo: 图：纽约州议会大厦（奥尔巴尼）。图片来源：Wikimedia Commons，授权见图页。 / Photo: New York State Capitol in Albany. Source: Wikimedia Commons (license on file page).
