Healthcare Firm and IT Provider Pay Millions Over Breach
Boston Children's Health Physicians and XTIUM will pay 2.7 million dollars following a 2024 data breach that compromised patient data.
FTMQ Security, written by our newsroom0 views
New York Attorney General Letitia James and Connecticut Attorney General William Tong secured a 2.7 million dollar settlement from Boston Children's Health Physicians and its IT company XTIUM on October 17, 2026. DataBreaches.net and Long Island Life & Politics both report that the entities were held liable following a 2024 data breach. [1][2]
The settlement resolves claims stemming from the exposure of patient information during the cybersecurity incident. DataBreaches.net reported that the financial penalty is accompanied by a mandatory corrective action plan designed to enhance data security practices at both companies. [1]
Letitia James has served as the 67th attorney general of New York since 2019. Boston Children's Hospital operates as the primary pediatric training hospital for Harvard Medical School in Massachusetts. [4][5]
Under the terms of the agreement, both the healthcare provider and its third party IT vendor must upgrade their technical safeguards to prevent future system intrusions and secure network infrastructures. [1]
In short
- New York and Connecticut attorneys general secured a 2.7 million dollar settlement over a 2024 data breach.
- The agreement involves Boston Children's Health Physicians and IT company XTIUM.
- The settlement requires both entities to implement a corrective action plan to improve data security.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]NY AG James and CT AG Tong Secure $2.7 Million from Boston Children’s Health Physicians and XTIUM for 2024 Data BreachDataBreaches.net, 2h ago (the report this story comes from)
- [2]Healthcare Firm, IT Company Settle for $2.7M in Data Breach CaseLong Island Life & Politics, 23h ago
Background
- [3]Ken Paxton on Wikipedia
- [4]Boston Children's Hospital on Wikipedia
- [5]Letitia James on Wikipedia
Our newsroom writes these reports with the help of software, from the 5 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- Italy fines healthcare data firm IQVIA 7.8 million dollars over privacy violationsPrivacy and Compliance, 12d ago
More in Data Breaches
- OpenCode breach exposes developer API keys following distillation attack1h ago
- Chinese hackers exploit critical BeyondTrust flaw for persistent network access21h ago
- Ransomware groups increase physical violence and psychological threats against employees1d ago
- German police arrest Russian man linked to fatal Synnovis ransomware attack1d ago
- South Korean banks boost cybersecurity spending following data leaks1d ago
- French Danfoss refrigeration controllers online exposure drops 71 percent after attack2d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.

Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.