A healthcare system in Illinois has agreed to pay the largest settlement by one entity for alleged violations of patient privacy law.
Advocate Health Care will pay $5.55 million to the federal government for three independent data breaches involving a medical group subsidiary.
The combined breaches potentially compromised the electronic health information of 4 million patients and included patient names, credit card numbers and birthdays, among the data.
An investigation of the breaches by the U.S. Department of Health and Human Services, Office for Civil Rights found that Advocate failed to properly assess the risks related to the data and did not adequately limit access to its information systems.
Read the resolution agreement and corrective action at HHS.gov.
Chivaroli and Associates Insurance Services is a full-service brokerage firm specializing in the custom-design and placement of insurance and alternative risk funding solutions for your healthcare organization.