纽约州总检察长达成最高1000万美元和解 医疗数据泄露波及420万纽约人
纽约州总检察长詹姆斯11月6日宣布，她与康涅狄格州、密歇根州和新泽西州总检察长联合，与佩里·约翰逊联合公司等五家公司达成和解，了结对2023年3月一起医疗数据泄露事件的调查。调查发现，黑客当年3月利用一名公司员工的账号侵入系统，窃取了与1330万人相关的个人与医疗信息，其中包括约420万纽约人。涉事公司为全美多地医疗机构提供编码、账单与病历转录等服务。按和解协议，五家公司须在协议生效后14天内向四州支付至少30万美元罚金，其中纽约州至少分得10万美元；若违反协议条款或财务陈述严重失实，还须追加支付970万美元，合计最高1000万美元。涉事公司还须执行更严格的信息安全与记录留存制度。詹姆斯表示，健康信息属于个人隐私，受托企业有责任严格保护。这也是她今年以来第四起大型健康数据执法和解，此前23andMe案1800万美元、Labcorp案230万美元均已落定。
（来源：纽约州总检察长办公室）
New York AG Reaches Settlement of Up to $10 Million Over Health Data Breach Affecting 4.2 Million New Yorkers
New York Attorney General Letitia James announced on Nov. 6 that she and the attorneys general of Connecticut, Michigan and New Jersey had reached a settlement with five Perry Johnson companies, resolving an investigation into a March 2023 medical data breach. Investigators found that hackers used an employee's account to access the systems that March and stole personal and medical information relating to 13.3 million people, including about 4.2 million New Yorkers. The companies provide coding, billing and medical transcription services to health care providers nationwide. Under the settlement, the five companies must pay at least $300,000 in penalties to the four states within 14 days of the agreement taking effect, of which New York receives at least $100,000; violations of the terms or material misstatements of their finances would trigger an additional $9.7 million, for a maximum of $10 million. The companies must also implement stricter information-security and record-retention programs. James said health information is private and the companies entrusted with it have a duty to protect it. It is her fourth major health-data enforcement settlement this year, following the $18 million 23andMe case and the $2.3 million Labcorp case.
(Source: New York Attorney General's Office)
来源：纽约州总检察长办公室
发布：GSM·美国（发布链接）
图片来源：图：纽约州议会大厦（奥尔巴尼）。图片来源：Wikimedia Commons，授权见图页。 / Photo: New York State Capitol in Albany. Source: Wikimedia Commons (license on file page).
GSM Global · 本篇英文版 English edition of this story
