Cancer Treatment Provider Agrees to $2.3M Fine for 2015 Breach

BY: David Bisson
A provider of radiation therapy and cancer treatment has agreed to pay a $2.3 million fine for a data breach it suffered back in 2015.
On 11 December, the United States Bankruptcy Court in the Southern District of New York received an order (PDF) approving a settlement agreement that pertains to 21st Century Oncology. The agreement stipulates that the cancer treatment provider will pay $2.3 million to the Office for Civil Rights (OCR) at the U.S. Department of Health & Human Services for a security incident it suffered several years ago.
Forensic evidence indicates that the intrusion took place on 3 October 2015 when an unauthorized third party gained access to a database maintained by 21st Century Oncology. It’s believed those actors subsequently viewed the personal information including the names, Social Security Numbers, and medical information of 2.2 million patients.
 
full article here: