On October 8, 2020, Iowa Attorney General Tom Miller announced a $5 million settlement to a data breach lawsuit with Community Health Systems (CHS). The 2014 data breach impacted nearly 6.1 million patients when hackers instigated a malware attack on the hospital’s electronic health records (EHR) system to steal personally identifiable information (PII) such as names, birthdates, Social Security numbers, addresses, and phone numbers.
As part of the settlement, CHS agreed to implement and maintain an information security system to prevent future data breaches.
