Healthcare Tech Firm Agrees To Pay Up to $10,000,000 After Breach Exposes Medical Records of 13,300,000 Patients

A healthcare technology company has agreed to a settlement worth up to $10 million after hackers exposed the sensitive medical records of 13.3 million patients. New York Attorney General Letitia James and officials from Connecticut, Michigan and New Jersey say Perry Johnson & Associates (PJ&A) and its affiliated companies have agreed to strengthen their data security and retention policies and pay the coalition at least $300,000 in penalties. They could face an additional $9.7 million in payments to the states if they fail to meet the settlement terms. New York will receive at least $100,000. Hackers got into the systems in March of 2023 using the credentials of a PJ&A Coding employee, and the company did not require multi-factor authentication for remote access.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to The Daily Hodl.