(Des Moines, IA) -- Iowa will share in a multi-million dollar, national settlement over a hospital data breach.
The Iowa Attorney General's Office says more than 7,000 Iowans' names, birthdates, social security numbers, addresses, and phone numbers were exposed in the 2014 breach.
Tennessee-based CHS-Community Health Systems has agreed to pay 27-states five (m) million dollars. Iowa's share is just under 40-thousand dollars.
CHS has also agreed to implement and maintain a comprehensive information security program reasonably designed to safeguard personal information and protected health information, which will include specific information security requirements.
“CHS failed to implement and maintain reasonable security practices,” Miller said. “The terms of this settlement will help ensure that patient information will be protected from unlawful use or disclosure.”