A Fort Wayne-based electronic health records company has agreed to pay $900,000 to 16 states because of a HIPAA-data breach.
Indiana will receive nearly $175,000, according to Indiana Attorney General Curtis Hill.
In May 2015, hackers broke into WebChart, an application run by Medical Informatics Engineering. They were able to steal protected health information from about 3.9 million people, including names, birthdates, Social Security numbers and diagnosis.
Hill said the company cooperated with his office since the beginning of the investigation.
The case, filed in federal court in South Bend, was the first multi-state lawsuit involving a HIPAA-data breach.
In addition to the settlement, MIE agrees to enact a number of safety measures, including multi-factor authentication, maintain data loss prevention technology, and submit to a risk analysis study every five years.
The first payment in the settlement is due on July 1, according to court documents.
