Perry Johnson companies pay up to $10 million after 2023 breach
Original title: State attorneys general secure up to $10 million and corrective action plan from Perry Johnson companies after 2023 breach
Settlement requires robust security policies and up to $9.7 million more penalties; 13.3 million individuals impacted including 4.2 million in New York.
New York Attorney General Letitia James and coalition secured $10 million from Perry Johnson companies following a March 2023 data breach. Hackers accessed systems using stolen credentials with no multi-factor authentication, exposing personal and health data. Companies must maintain security programs, implement multi-factor authentication, encryption, and annual risk assessments.
- 13.3 million individuals exposed
- 4.2 million New Yorkers affected
- No multi-factor authentication used
- Hackers harvested passwords and accessed unencrypted files
- $300,000 penalties plus $9.7 million possible
Impact: Exposure of personal and protected health information for 13.3 million individuals
| Product | Affected | Fixed in |
|---|---|---|
| Perry Johnson & Associates, Inc. IT services | March 2023 breach | Robust security policies and multi-factor authentication |
- 1.Implement multi-factor authentication
- 2.Enact encryption and asset management safeguards
- 3.Conduct annual risk assessments
- Victims
- 13.3 million individuals
- Organizations
- NYS Attorney General
- Countries
- United States
From the original article
5 min read at databreaches.netA press release from NYS Attorney General Letitia James: NEW YORK – New York Attorney General Letitia James and a coalition of three other attorneys general today secured $10 million from Perry Johnson & Associates, Inc. (PJ&A), Perry Johnson, Inc. (PJI), Perry Johnson & Associates Coding, Inc.
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.