The Massachusetts attorney general’s office on Sept. 20 announced it had smacked UMass Memorial Medical Group and UMass Memorial Medical Center with a total of $230,000 in financial penalties as part of a settlement for two separate breach cases affecting a total of 15,000 individuals. Both are part of UMass Memorial Health Care.The cases each involved former employees who allegedly inappropriately accessed patient information, which was subsequently used in identity theft and fraud crimes, including for opening cell phone and credit card accounts.The attorney general’s office tells Information Security Media Group that one of the UMass Memorial Health Care employees was criminally charged in one of the breaches, but declined to discuss details.

Source: Click here