CYBERSECURITYTRACKER
Permanent story citation

Ambulance Firm's $1M Settlement Mandates Data Destruction

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11124

As cited

Copy frozen at (site build).

regulatory

Ambulance Firm's $1M Settlement Mandates Data Destruction

A former ambulance company settled with Massachusetts regulators for $1 million over a 2023 data breach affecting 750,000 people and separate Medicaid billing fraud allegations. The settlement requires the firm to address violations of HIPAA and state data security rules stemming from its failure to protect archived patient and employee information. The agreement includes data destruction mandates.

Why it matters: Healthcare providers and billing services face enforcement action for breach response failures and billing compliance gaps; regulators are holding companies accountable for archived data protection and demanding remediation beyond fines.

First seen by Cybersecurity Tracker

Source attribution

Glossary