HIPAA

Medical records firm behind a 13.3 million-patient breach owes $300,000, not $10 million, in four-state settlement

New York, Connecticut, Michigan and New Jersey settled with Perry Johnson & Associates over a 2023 hack that exposed Social Security numbers and medical records. The rest of the $10 million is owed only if the companies break the deal.