NY AG and three states settle with Perry Johnson medical transcription firms over a 2023 breach of 13.3 million patients' records
- Exposed fields (per AG): names, DOBs, home addresses, SSNs, hospital account numbers, diagnoses, insurance info, and clinical transcription content including meds and lab/diagnostic results.
- Lesson: MFA on remote access and alerting on the detections you already collect would have shortened a two-month dwell.
Sources: NY Attorney General James press release (Nov 6) · The Record: medical services company settles with 4 states (Nov 6)