article thumbnail

Settlement Reached in Excellus HIPAA Class Action Lawsuit

Compliancy Group

In January 2021, Excellus entered into a settlement agreement with the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) over the 2015 data breach. Excellus agreed to make the following changes to their business practices: Increasing and maintaining a minimum information security budget.

HIPAA 52