Premera Blue Cross to pay $6.85M to settle 2015 breach

Premera Blue Cross has agreed to pay $6.85 million and implement a corrective-action plan to settle potential HIPAA violations related to a 2015 data breach. The breach exposed the data of 10.4 million people. The Office for Civil Rights said it found systemic noncompliance with HIPAA rules and will oversee a corrective action plan for two years. This is the second-largest payment to resolve a HIPAA investigation in OCR’s history.