New York13 million patients’ records sat behind no multi-factor authentication.
Perry Johnson’s subsidiaries pay $300,000 after hackers allegedly took diagnoses, lab results and Social Security numbers.
New York’s attorney general says hackers used one employee’s login, and poorly configured software logged them without alerting security staff.
Perry Johnson owes the four states a further $9.7 million if it misses the required security reforms.
How each outlet framed it
- The Record leans critical
- details how Perry Johnson's software logged the intruder for two months without flagging it, until the hackers told the firm themselves
Sources: The Record