The U.S. Department of Health and Human Services' Office for Civil Rights announced Excellus Health Plan will pay $5.1 million to settle alleged violations of the Health Insurance Portability and Accountability Act Privacy and Security Rules. The settlement stems from a data breach that affected more than 9.3 million people. Excellus reported the breach started in December 2013 and ended in May 2015. As part of the settlement, Excellus will undertake a corrective action plan that includes two years of monitoring.
Full Story