1,788 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.
1,788
Total Actions
16
Jurisdictions
$51.8B+
Total Fines Tracked
A March 2023 breach exposed personal and protected health information belonging to more than 13.3 million people after hackers accessed the companies’ systems, including unencrypted files, and security alerts were not properly configured. The companies agreed to pay at least $300,000 in penalties, with up to $9.7 million more due if they fail to comply, and to implement extensive security, incident-response, and data-handling reforms.
$10.0M
Connecticut announced an $8 million settlement with Mylan over allegations that it used agreements to delay generic EpiPen competitors and took other actions that inflated prices. Mylan also agreed to provide 10,000 free EpiPens; the release states that Mylan denies wrongdoing.
$8.0M
Connecticut and New York found that Boston Children’s Health Physicians and its security vendor, XTIUM, failed to use reasonable safeguards, resulting in hackers accessing sensitive personal, medical, and employee information. The companies agreed to pay penalties totaling $2.64 million and implement enhanced cybersecurity measures.
$2.6M
Connecticut Attorney General William Tong led a coalition of 45 states and territories seeking court approval for settlements resolving allegations that Ascend Laboratories, Citron Pharma, and Mayne Pharma conspired to inflate prices and limit competition for generic prescription drugs. Ascend agreed to pay $400,000, Mayne agreed to pay $650,000, and Citron’s settlement includes non-monetary terms; the companies also agreed to internal reforms.
$1.1M
Connecticut Attorney General William Tong led a 44-attorney-general coalition settlement with Laboratory Corporation of America over the 2019 AMCA breach, which potentially exposed personal information of more than 27.5 million people, including 10.2 million Labcorp patients. Labcorp will pay $2,287,455 and implement enhanced vendor-risk management, information-security, and oversight measures.
$2.3M
Connecticut Attorney General announced a $1.73 million settlement with Enzo Clinical Labs for overbilling the state Medicaid program. The lab billed Medicaid full prices while offering discounted rates to other payers, violating the state False Claims Act. The settlement resolves both an audit repayment and claims from a whistleblower investigation.
$1.7M
Connecticut Attorney General William Tong, along with New York and New Jersey attorneys general, secured a $4.5 million settlement from Enzo Biochem, Inc. for failing to protect patient health data, resulting in a ransomware attack that compromised 2.4 million patients' information. Enzo must pay the fine and implement enhanced cybersecurity measures including multi-factor authentication and annual risk assessments.
$4.5M
All data sourced from official government enforcement pages.