The HIPAA Journal reports cycle management firm MedData agreed to pay USD7 million to settle a class-action lawsuit related to a data breach. The lawsuit involved an incident where the data of 136,000 people was exposed after an employee allegedly uploaded the information to a public-facing website.