Health insurer Aetna is still paying the price for two 2017 privacy breaches involving mailings that potentially exposed HIV and cardiac condition information about thousands of individuals.
After a multistate investigation, Aetna last week signed financial settlement agreements with Washington, D.C., for $175,000, Connecticut for $100,000 and New Jersey for $365,000. The amount of another new settlement with the state of Washington was undisclosed.
David Holtzman’s comments are featured in this article.