Click to read more.
AG James Co-Leads Bipartisan Coalition of 41 Attorneys General In Resolving Data Breach
Investigation That Exposed Personal Information of Up to 21 Million Americans
NEW YORK – New York Attorney General Letitia James today announced an
agreement between a bipartisan coalition of 41 attorneys general from around the nation and the Westchester County debt collection agency Retrieval-Masters Creditors Bureau, d/b/a American Medical Collection Agency (AMCA), that resolves a multistate investigation into the company’s 2019 data breach
. The breach exposed the personal information — including Social Security numbers, payment card information, and, in some instances, names of medical tests and diagnostic codes — of up to 21 million individuals, including 582,146 New Yorkers. AMCA is based in Elmsford, New York and specializes in small-balance medical-debt collection, primarily for laboratories and medical testing facilities.
“If companies are going to manage New Yorkers’ personal information, they must make every effort to protect that information,” said
Attorney General James
. “But AMCA’s security failures resulted in 21 million Americans having their data illegally accessed. I am committed to protecting New Yorkers’ personal data and will not hesitate to hold companies accountable when they fail to safeguard that information. Today’s agreement ensures that the company has the appropriate security and incident response plan in place so that a failure like this does not take place again.”
Between August 1, 2018 and March 30, 2019, an unauthorized user gained access to AMCA’s internal system and was able to collect a wide variety of customers’ personal information. Despite numerous warnings from banks that processed its payments about a potential breach, AMCA failed to detect the intrusion.
On June 3, 2019, AMCA provided notice to the states, including New York — which immediately opened an investigation. The company also simultaneously began providing notice to affected individuals. To help manage the harm from the exposure of personal information, AMCA offered affected individuals two years of free credit monitoring.
On June 17, 2019 — as a result of the costs associated with providing notification and remediating the breach — AMCA filed for bankruptcy. In order to continue the investigation and take steps to ensure that the personal information of their residents was protected, Attorney General James and other members of the multistate coalition participated in the bankruptcy proceedings. The company ultimately received permission from the bankruptcy court to settle with the multistate coalition, and, on December 9, 2020, the company filed for dismissal of the bankruptcy.
Under the terms of today’s agreement, AMCA and its principals have agreed to implement and maintain a number of data security practices designed to strengthen its information security program and safeguard the personal information of consumers. These include:
Creating and implementing an information security program with detailed requirements, including an incident response plan;
Employing a duly qualified chief information security officer to oversee data safety practices at the company;
Hiring a third-party assessor to perform an information security assessment; and
Cooperating with the attorneys’ general investigation and maintaining evidence.
As part of the agreement, AMCA may also be liable for a $21 million payment to the states if the company violates the injunctive terms of the agreement. Because of AMCA’s financial condition, the payment will be suspended if no violation occurs.
Joining Attorney General James in co-leading this investigation were the attorneys general of Connecticut, Indiana, and Texas. They were joined by the attorneys general of Arizona, Arkansas, Colorado, Florida, Georgia, Hawaii, Idaho, Illinois, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Minnesota, Missouri, Nebraska, Nevada, New Hampshire, New Jersey, New Mexico, North Carolina, Ohio, Oklahoma, Oregon, Pennsylvania, Rhode Island, South Carolina, Tennessee, Utah, Vermont, Virginia, Washington, West Virginia, and the District of Columbia.
This matter was handled for New York by Deputy Bureau Chief Clark Russell of the Bureau of Internet and Technology, under the supervision of Bureau Chief Kim Berger. The Bureau of Internet and Technology is a part of the Division for Economic Justice, which is led by Chief Deputy Attorney General Chris D’Angelo and overseen by First Deputy Attorney General Jennifer Levy.
Source URL: Read More
The public content above was dynamically discovered – by graded relevancy to this site’s keyword domain name. Such discovery was by systematic attempts to filter for “Creative Commons“ re-use licensing and/or by Press Release distributions. “Source URL” states the content’s owner and/or publisher. When possible, this site references the content above to generate its value-add, the dynamic sentimental analysis below, which allows us to research global sentiments across a multitude of topics related to this site’s specific keyword domain name. Additionally, when possible, this site references the content above to provide on-demand (multilingual) translations and/or to power its “Read Article to Me” feature, which reads the content aloud to visitors. Where applicable, this site also auto-generates a “References” section, which appends the content above by listing all mentioned links. Views expressed in the content above are solely those of the author(s). We do not endorse, offer to sell, promote, recommend, or, otherwise, make any statement about the content above. We reference the content above for your “reading” entertainment purposes only. Review “DMCA & Terms”, at the bottom of this site, for terms of your access and use as well as for applicable DMCA take-down request.
Acquire this Domain
You can acquire this site’s domain name! We have nurtured its online marketing value by systematically curating this site by the domain’s relevant keywords. Explore our content network – you can advertise on each or rent vs. buy the domain. Buy@TLDtraders.com | Skype: TLDtraders | +1 (475) BUY-NAME (289 – 6263). Thousands search by this site’s exact keyword domain name! Most are sent here because search engines often love the keyword. This domain can be your 24/7 lead generator! If you own it, you could capture a large amount of online traffic for your niche. Stop wasting money on ads. Instead, buy this domain to gain a long-term marketing asset. If you can’t afford to buy then you can rent the domain.
We are Internet Investors, Developers, and Incubators- operating a content network of several thousand sites while federating 20+ eCommerce and SaaS startups. With our proprietary “inverted incubation” model, we leverage a portfolio of $15M+ in valued domains to impact online trends, traffic, and transactions. We use robotic process automation, machine learning, and other proprietary approaches to power our content network. Discover our work!