TBA Law Blog

Posted by: Katharine Heriges on May 29, 2019
Attorney General Herbert H. Slatery III announced today that a U.S. District Court judge has signed a consent judgment negotiated by 16 states’ attorneys general and Medical Informatics Engineering Inc. This case was the nation’s first-ever multistate lawsuit involving a HIPAA-related data breach. The lawsuit, led by Indiana, was filed in December 2018 against a web-based electronic health records company based in Fort Wayne, Indiana. The company allegedly sustained a data breach compromising the data of more than 3.9 million people. The data of 43,373 Tennesseans, including 14,871 Social Security numbers, was compromised. With the signing of the consent judgment, the 16 states will receive $900,000 with Tennessee receiving $21,238.