Boston Children’s Health Physicians; XTIUM Settle Alleged HIPAA Violations for $2.7M

Reported by HIPAA Journal (Steve Alder)

Summary by Cyber Security News19 Oct 2026, 16:59 CET

About this summary. This is a short excerpt from the description that HIPAA Journal published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.hipaajournal.com/boston-childrens-health-physicians-xtium-hipaa-penalty-ny-ct/

Boston Children’s Health Physicians (BCHP) and the managed IT service provider XTIUM have agreed to settle an investigation by the New York and Connecticut Attorneys General into a 2024 data breach that affected almost 890,000 individuals. The settlement includes a $4 million financial penalty, $2,700,000 of which will be paid to the states, and $1,300,000 has been suspended. New York will receive $2.1 million, and Connecticut will receive $540,000.

Read the full article at HIPAA Journal →

Source attribution: headline and facts are from HIPAA Journal (hipaajournal.com). Summary method: excerpt of the source description. See our source attribution policy.