康涅狄格州华裔总检察长童伟麟达成最高1000万美元数据泄露和解
康涅狄格州哈特福德市消息：康涅狄格州华裔总检察长童伟麟11月6日联合密歇根州与新泽西州总检察长宣布，与佩里·约翰逊旗下多家公司达成最高1000万美元和解，了结2023年3月发生的一起重大医疗数据泄露事件。
此次泄露波及全美1330多万人的个人信息，其中康涅狄格州居民约107,960人。佩里·约翰逊公司是为全美多家医疗机构提供编码、账单与转录等信息技术服务的企业，因未能保护其保管的私人医疗数据而遭到三州总检察长追责。
根据和解协议，康涅狄格州将获得66,666美元罚金与费用。和解还包括一系列关键整改措施，要求相关公司强化数据安全保护，防止类似泄露再次发生。
童伟麟表示，医疗数据属于最敏感的个人信息，企业有责任采取足够措施加以保护，监管部门将继续追究未能尽责的企业。
Connecticut AG William Tong Reaches Up to $10 Million Settlement Over Medical Data Breach
HARTFORD, Conn. — Connecticut Attorney General William Tong, joined by the attorneys general of Michigan and New Jersey, announced on November 6 a settlement of up to $10 million with companies under Perry Johnson, resolving a major medical data breach that occurred in March 2023.
The breach exposed the personal information of more than 13.3 million people nationwide, including about 107,960 Connecticut residents. The Perry Johnson companies provide information technology services such as coding, billing and transcription to health care providers across the country, and the three attorneys general held them responsible for failing to protect the private medical data in their custody.
Under the settlement, Connecticut will receive $66,666 in penalties and costs. The agreement also requires a series of key reforms obliging the companies to strengthen data security and prevent similar breaches.
Tong said medical data is among the most sensitive personal information, that companies have a duty to protect it adequately, and that regulators will continue to hold accountable those that fail to do so.
来源：康涅狄格州总检察长办公室
发布：GSM·美国（发布链接）
图片来源：康涅狄格州总检察长童伟麟（Wikimedia Commons，CC BY-SA 2.0）
GSM Global · 本篇英文版 English edition of this story
