NY AG James and CT AG Tong Secure $2.7 Million from Boston Children’s Health Physicians and XTIUM for 2024 Data Breach
New York and Connecticut secured $2.7 million from Boston Children's Health Physicians and XTIUM over a 2024 patient-data breach.
New York Attorney General Letitia James and Connecticut Attorney General William Tong announced a $2.7 million settlement with Boston Children's Health Physicians and IT vendor XTIUM over an August 2024 breach. Attackers who compromised XTIUM reached 18 client networks, including BCHP, and stole records of about 825,000 New York residents and 62,871 Connecticut residents. The data included Social Security and driver's license numbers for more than 170,000 New Yorkers, plus an unencrypted archive of more than one million patient billing records. The companies must pay $2.1 million to New York and $540,000 to Connecticut and implement stronger security, logging, and vendor-oversight controls.
- August 2024 XTIUM breach let hackers reach 18 client networks, including BCHP.
- Stolen records covered about 825,000 New Yorkers and 62,871 Connecticut residents.
- More than 170,000 New York residents lost Social Security or driver's license numbers.
- BCHP and XTIUM will pay $2.1 million to New York and $540,000 to Connecticut.
- An unencrypted archive of over one million patient billing records was stolen.
From the original article
5 min read at databreaches.netNY’s Attorney General and CT’s Attorney General held both a provider and its IT company liable for a data breach. The settlement also includes a corrective action plan to improve data security. New York Attorney General Letitia James and Connecticut Attorney General William Tong today secured $2.
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.