The data breach happened between 2013 and 2015 and affected tens of millions of members.
The settlement, affecting Excellus and the Blue Cross Blue Shield Association, requires the parties to make internal security changes, and to pay out $3.3 million in fees and $1 million in reimbursed expenses, according to the announcement.
A hearing on the settlement is set for April 13.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.