Have you heard about the latest medical data breach resolution? South Carolina settled the data breach with American Medical Collection Agency. 
SC Attorney General Alan Wilson said the changes the company is making are a win for South Carolinians and residents of 40 other states.
The 2019 breach exposed the personal information of over 7 million people in the US and 55,799 in South Carolina.
If AMCA violates certain terms of the settlement it may be liable for a $21 million payment. Wilson said the settlement won’t result in payments for the states or consumers but the changes  will protect privacy.
What are the consequences? AMCA will have to create an information security program with an incident response plan. AMCA will employ a qualified Chief Information Security Officer and a 3rd-party to assess their security. AMCA will also need to continue cooperating with investigators.
What happened? In 2018 and 2019, an unauthorized user gained access to AMCA’s internal system and took sensitive information including social security numbers, payment card info and medical details.
On June 3, 2019, AMCA notified states and compromised individuals with an offer of 2 years of free credit monitoring.
On June 17, 2019, AMCA filed for bankruptcy citing the costs of notifications and fixing the breach. On December 9, 2020, AMCA filed for dismissal of the bankruptcy.