HHS Reaches $80,000 Settlement With Elgon in Ransomware Probe

The Department of Health and Human Services’ Office for Civil Rights announced an $80,000 settlement with Elgon Information Systems, a Massachusetts company that provides electronic medical record and billing support services, under the Health Insurance Portability and Accountability Act of 1996 Security Rule, the agency announced Tuesday.

According to HHS, on March 25, 2023, an unknown actor gained access to a server on Elgon’s information system through open ports on the company’s firewall. Elgon did not detect the intrusion until March 31, 2023, when a ransom note was found. In June 2023, Elgon filed a breach report with HHS ...