New York AG Settles EnforcemENT Action With ENT

Listen to this post

The New York Attorney General's Office recently settled with Albany ENT & Allergy Services over claims that the healthcare provider failed to protect over 200,000 consumers' private health information. The claims stem from two ransomware attacks in 2023. The AG argued that the company had violated New York's data security law, resulting in the incident. As part of the settlement, Albany ENT agreed to pay $2.75 million in civil penalties and to implement additional security measures.

Among other things, the company has agreed to the following:

• Maintain a comprehensive Information Security Program that includes sufficient measures to protect personal information.