Integris Health Reaches $30M Settlement Over Patient Data Breach
HIPAA Journal
|
Contributed by: Drex DeFord
Summary
Integris Health has reached a $30 million settlement to resolve a class action lawsuit stemming from a major data breach in 2023 that exposed the electronic protected health information of over 2.38 million individuals. Unauthorized access occurred when hackers infiltrated the healthcare provider's systems, obtaining sensitive patient data, including Social Security numbers. The incident, which involved unencrypted files, raised significant concerns about the efficacy of security measures in healthcare technology, highlighting the critical need for stronger data protection protocols. Integris Health attributed the breach to a third-party vendor but faced scrutiny for its own security practices, a reminder for healthcare organizations to prioritize cybersecurity in their operations.