On June 26, 2020, UnityPoint Health agreed to a $2.8 million settlement in a data breach lawsuit filed after two 2017 and 2018 phishing attacks compromised the protected health information (PHI) and confidential data of approximately 1.4 million patients and employees.
The breaches occurred when hackers gained access to employee email accounts.