US healthcare org pays $11M settlement over alleged cybersecurity lapses

US healthcare org pays M settlement over alleged cybersecurity lapses
Summary: Health Net Federal Services (HNFS) and Centene Corporation will pay over million to settle allegations of falsely certifying compliance with cybersecurity requirements in their TRICARE contract. Between 2015 and 2018, HNFS failed to implement essential cybersecurity measures while managing healthcare services for military personnel, despite claiming compliance. They deny any wrongdoing but agreed to the settlement to resolve the matter.

Affected: Health Net Federal Services (HNFS) and Centene Corporation

Keypoints :

  • HNFS was contracted to provide managed healthcare but did not meet required cybersecurity standards.
  • The U.S. DOJ accused HNFS of incorrectly certifying compliance on multiple occasions between 2015 and 2017.
  • The settlement does not shield HNFS or Centene from future criminal or civil liabilities.

Source: https://www.bleepingcomputer.com/news/security/us-healthcare-org-pays-11m-settlement-over-alleged-cybersecurity-lapses/