The enforcing regulatory authority: U.S. Department of Health and Human Services
The data breach: 4 million patients personal data, financial information and electronic health information was exposed in 3 different incidents within 1 year.
The Settlement amount: almost $6 million fine