USA: 27 State AGs announce $5M settlement against CHS following data breach
The Connecticut Attorney General ('AG'), William Tong, announced, on 8 October 2020, along with 27 AGs, a $5 million settlement with Tennessee based Community Health Systems, Inc. ('CHS'), resolving an investigation following a data breach which affected approximately 6.1 million patients. In particular, AG Tong highlighted that CHS had failed in their obligation to safeguard patient data and the settlement outlines new strong protections to be implemented as part of a comprehensive information security program to safeguard personal information and personal health information. The other states involved in the settlement include Alaska, Arkansas, Florida, Illinois, Indiana, Iowa, Kentucky, Louisiana, Massachusetts, Michigan, Mississippi, Missouri, Nebraska, Nevada, New Jersey, North Carolina, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, Tennessee, Texas, Utah, Vermont, Washington, and West Virginia.
You can read the press release here.