Premera Blue Cross to Pay $10 Million for Leaked Health Records

The largest health insurance provider in the Pacific Northwest will pay $10 million to settle a multistate investigation into a cyberattack that exposed the sensitive personal data of more than 10 million customers.

Premera Blue Cross violated the Health Insurance Portability and Accountability Act by not heeding warnings that its security program was inadequate, Montana Attorney General Tim Fox said in a statement announcing the settlement. The company’s security lapses allowed a hacker to access insurees’ Social Security numbers, bank account information, and email addresses from May 2014 to March 2015, Fox said.

“For years prior to the breach, cybersecurity ...