13.3 million people’s medical data exposed; companies pay $300,000

Source: Malwarebytes Labs

Read original source

At a glance

The New York attorney general (AG) has reached a settlement over a medical data breach that affected 13.3 million people after basic security failures. Perry Johnson & Associates (PJ&A) and four related companies have agreed to pay $300,000 and implement extensive security reforms following a breach that exposed personal and medical information belonging to more than 13.3 million people. They face another $9.7 million in penalties if they fail to meet the settlement’s terms. New York AG Letitia James announced the agreement on November 6, alongside the attorneys general of Connecticut, Michig…