The company did not update its software in a timely manner, which led to a 2020 cyberattack that compromised the protected health information of 1.2 million individuals, according to a May 23 press release from the New York attorney general’s office.
Practicefirst agreed to pay $550,000 in penalties to New York, and has agreed to strengthen its data security practices and provide free credit monitoring services for all affected individuals.
