HHS agrees to $480,000 settlement with Louisiana medical group over data breach

The Lafourche Medical Group will pay a $480,000 settlement to the U.S. Department of Health and Human Services (HHS), following a cyberattack in 2021 that violated the Health Insurance Portability and Accountability Act (HIPAA) and exposed health data of around 35,000 individuals. The group will also be audited regularly by HHS for two years and has agreed to implement a plan to reduce cybersecurity risk.