Refuah Health settles ransomware case with cyber investment & hefty fines

January 11, 2024
1 min read

TLDR:

New York-based Refuah Health Center has reached a settlement with the state Attorney General, Letitia James, following a ransomware attack that compromised the data of over 260,740 individuals. As part of the settlement, Refuah Health Center is required to allocate over $1.2 million towards strengthening its cybersecurity measures, including patient data security, multi-factor authentication, and regular security audits. The settlement also imposes a fine of $450,000 on Refuah Health for its negligence in securing patient data.

Key Points:

  • Refuah Health Center has been ordered by the state Attorney General, Letitia James, to invest over $1.2 million in cybersecurity measures following a ransomware attack that compromised the data of over 260,740 individuals.
  • The settlement also includes a $450,000 fine for Refuah Health’s negligence in securing patient data.
  • The cybersecurity investment will focus on strengthening patient data security, implementing multi-factor authentication, and conducting regular security audits.
  • Refuah Health will pay the fine in annual installments of $117,000, with a $100,000 deduction if it achieves its cybersecurity investment goal from 2024 to 2028.

New York-based Refuah Health Center has been compelled by state Attorney General Letitia James to allocate more than $1.2 million to strengthen its cybersecurity posture through more robust patient data security, multi-factor authentication, and semi-annual security audits, as part of its settlement of a Lorenz ransomware attack in May 2021 that compromised the data of over 260,740 individuals, reports The Record, a news site by cybersecurity firm Recorded Future.

The deal also requires Refuah Health to pay $450,000 for its negligence in securing patient data, which will be paid in annual increments of $117,000 although it will be given a $100,000 deduction if it achieves its cybersecurity investment goal from 2024 to 2028.

“This agreement will ensure that Refuah is taking the appropriate steps to protect patient data while also providing affordable health care. Strong data security is critically necessary in today’s digital age, and my office will continue to protect New Yorkers’ data from companies with inadequate cybersecurity,” said James.

References:

https://www.scmagazine.com/ransomware/significant-cyber-investment-fines-part-of-refuah-healths-ransomware-settlement

Latest from Blog

Top 3 Cybersecurity Stocks for May 2024 Buy Now

TLDR: Key Points: Cybersecurity stocks are using AI to enhance their platforms Top cybersecurity stocks to buy now include Crowdstrike, Fortinet, and Palo Alto Networks Article Summary: The cybersecurity market is booming