Tennessee Health Data Management Firm Agrees to $2m Data Breach Settlement
A Tennessee firm that provides health data management services has agreed to pay the United States Office for Civil Rights (OCR) $2.3m to settle charges related to a data breach.
Charges were brought against Tennessee-based Community Health Systems (CHSPSC LLC) by 28 states after the personal health information (PHI) of millions of people ended up in the hands of cyber-criminals.
In April 2014, CHSPSC was notified by the Federal Bureau of Investigation that Chinese advanced persistent threat group APT18 had gained access to the company’s information system and was exfiltrating PHI. The hackers continued to access and exfiltrate the PHI until August 2014, despite the notice’s being sent.
CHSPSC provides a variety of business associate services, including IT and health information management, to hospitals and clinics indirectly owned by Community Health Systems, Inc., in Franklin, Tennessee. Community Health Systems owned, leased, or operated 206 affiliated hospitals at the time of
![a group of people standing in front of a crowd: Protesters gathered outside the City County Building's large assembly room during the Knox County Commission meeting on Monday, September 28, 2020 in opposition to the Knox County Board of Health's safety mandates for dealing with the coronavirus pandemic.](https://www.msn.com/{"default":{"load":"default","w":"80","h":"53","src":"//img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19wRvQ.img?h=533&w=799&m=6&q=60&o=f&l=f&x=2946&y=2310"},"size3column":{"load":"default","w":"62","h":"42","src":"//img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19wRvQ.img?h=417&w=624&m=6&q=60&o=f&l=f&x=2946&y=2310"},"size2column":{"load":"default","w":"62","h":"42","src":"//img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19wRvQ.img?h=417&w=624&m=6&q=60&o=f&l=f&x=2946&y=2310"}})
![a group of people standing in front of a crowd: Appriximately 300 people gathered outside the City County building on Monday, September 28, 2020 to protest the board of health and support a resolution to strip the board of its power to enact pandemic regulations.](https://www.msn.com/{"default":{"load":"default","w":"80","h":"53","src":"//img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19wKx4.img?h=533&w=799&m=6&q=60&o=f&l=f&x=1618&y=347"},"size3column":{"load":"default","w":"62","h":"42","src":"//img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19wKx4.img?h=416&w=624&m=6&q=60&o=f&l=f&x=1618&y=347"},"size2column":{"load":"default","w":"62","h":"42","src":"//img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19wKx4.img?h=416&w=624&m=6&q=60&o=f&l=f&x=1618&y=347"}})