Medical firm reaches $100,000 settlement with HHS over 2017 ransomware attack

Doctors’ Management Services, a Massachusetts-based medical management firm, has agreed to pay a $100,000 settlement to the US Department of Health and Human Services (HHS) following a 2017 ransomware attack. The company was found to have violated Health Insurance Portability and Accountability Act laws, including failing to determine risks to its electronic health information. In addition to the fine, the firm will be monitored by HHS for three years and must implement a plan to better protect customer health information.