State AG sues Apria Healthcare
By HME News Staff
Updated 9:27 AM CDT, Mon March 11, 2024
INDIANAPOLIS – The Attorney General for the state of Indiana on Feb. 29 filed a lawsuit against Apria Healthcare related to a data breach that the state says persisted for multiple years. Apria, which had its main headquarters in Indianapolis before it was bought by Richmond, Va.-based Owens & Minor in 2022, previously provided notice of the breach in May 2023. The lawsuit requests relief on a number of counts, including award damages of up to $100 per violation for up to $25,000 per violation of an identical requirement per year; and civil penalties of up to $500 for each “incurable deceptive act.” Apria says it took immediate action to mitigate the incident, including working with the Federal Bureau of Investigation and hiring a forensic investigation team to investigate and resolve the incident. Based on its investigation and discussions with law enforcement, it believes that the purpose of the unauthorized access was to fraudulently obtain funds from Apria and not to access personal information of its patients or employees, and that there is no evidence of funds removed. It is also not aware of the misuse of personal information related to this incident.
Comments