WORLD WATCH · October 17, 2026 · NEWS
NY and CT AGs Secure $2.7M Settlement for 2024 Data Breach
New York and Connecticut attorneys general secured a $2.7 million settlement for a 2024 data breach.
- Reported by
- Malware News
- Outlets reporting
- 1
- Category
- NEWS
- Newest report
- October 17, 2026
Plain-English brief. Written for readers who work in a second language.
Key takeaways
- $2.7 million settlement from a health provider and its IT vendor
- Both provider and IT company held liable for 2024 breach
- Settlement includes corrective action plan for data security
What happened
The report comes from Malware News. New York Attorney General Letitia James and Connecticut Attorney General William Tong held both a provider and its IT company liable. The provider is Boston Children's Health Physicians. The IT company is XTIUM. The settlement totals $2.7 million. It also includes a corrective action plan to improve data security.
Why it matters
The case shows that both a health provider and its IT vendor can face liability for one data breach. Regulators now target vendors alongside providers. The corrective action plan requires stronger data security controls.
What to do
- Review vendor contracts for shared breach liability.
- Check that IT vendors follow your security standards.
- Update incident response plans to include vendor roles.
SOURCE: INTEL128 WORLD WATCH (UPDATED OCT 18, 2026). This brief summarizes reporting by Malware News. Intel128 writes the summary and credits the outlet. Read the summary as a starting point, not as a substitute for the original reporting.