Newsday reports:
A Lake Success-based home health care company reached a $350,000 settlement with the state after failing to protect the health care data of more than 316,800 New Yorkers, the state attorney general said Wednesday.
Personal Touch Holding Corp., which provides home health care and hospice services through subsidiary companies, had an “informal and immature” approach to securing data, New York Attorney General Letitia James’ office said in a news release.
A hacker accessed Personal Touch’s network when an employee opened a file containing malware in 2021. The hacker collected 4,380 files from a server that contained Social Security numbers, medical treatments and other personal information on current and former patients and staff, according to a copy of the company’s agreement with the attorney general. The breach may have impacted more than 753,100 people, including about 316,800 New Yorkers, the agreement said.
Read more at Newsday. The settlement agreement can be found on the NYS Attorney General’s website.
