Anthem settles 2015 cybersecurity breach for $39.5 million

Anthem has agreed to a $39.5 million settlement with state attorneys general over a cyberattack in 2015. Anthem denies any violation of the law and is not admitting to any violations in the settlement. The settlement resolves the last open investigation related to the cyberattack, which exposed the protected health information of nearly 79 million people. The cyberattacker was allegedly acting on behalf of a foreign government, and two members of the criminal attack group were indicted by the Department of Justice in 2019.