binarypublish
TLDR:
New York-based Refuah Health Center has reached a settlement with the state Attorney General, Letitia James, following a ransomware attack that compromised the data of over 260,740 individuals. As part of the settlement, Refuah Health Center is required to allocate over $1.2 million towards strengthening its cybersecurity measures, including patient data security, multi-factor authentication, and regular security audits. The settlement also imposes a fine of $450,000 on Refuah Health for its negligence in securing patient data.
Key Points:
- Refuah Health Center has been ordered by the state Attorney General, Letitia James, to invest over $1.2 million in cybersecurity measures following a ransomware attack that compromised the data of over 260,740 individuals.
- The settlement also includes a $450,000 fine for Refuah Health’s negligence in securing patient data.
- The cybersecurity investment will focus on strengthening patient data security, implementing multi-factor authentication, and conducting regular security audits.
- Refuah Health will pay the fine in annual installments of $117,000, with a $100,000 deduction if it achieves its cybersecurity investment goal from 2024 to 2028.
New York-based Refuah Health Center has been compelled by state Attorney General Letitia James to allocate more than $1.2 million to strengthen its cybersecurity posture through more robust patient data security, multi-factor authentication, and semi-annual security audits, as part of its settlement of a Lorenz ransomware attack in May 2021 that compromised the data of over 260,740 individuals, reports The Record, a news site by cybersecurity firm Recorded Future.
The deal also requires Refuah Health to pay $450,000 for its negligence in securing patient data, which will be paid in annual increments of $117,000 although it will be given a $100,000 deduction if it achieves its cybersecurity investment goal from 2024 to 2028.
“This agreement will ensure that Refuah is taking the appropriate steps to protect patient data while also providing affordable health care. Strong data security is critically necessary in today’s digital age, and my office will continue to protect New Yorkers’ data from companies with inadequate cybersecurity,” said James.
References:
