Medical services company settles with 4 states over 2023 hack of sensitive patient records
Perry Johnson Companies, a Nevada-based medical services firm, has reached a settlement with attorneys general in Connecticut, New Jersey, New York, and Michigan over a 2023 breach that exposed sensitive patient records held by its medical transcription, coding, and imaging subsidiaries.
Why this matters: Medical transcription companies sit in a strange, mostly invisible position in healthcare. They handle some of the most detailed clinical records that exist — diagnoses, treatments, notes doctors dictate in private — but most patients have no idea these companies exist, let alone that their records were shared with them. When a breach happens here, you cannot opt out or change providers. You never agreed to the relationship in the first place. Four states had to step in because individuals had no real way to hold this company accountable themselves. That is the gap this kind of enforcement is supposed to fill.
Who should care: Healthcare professionals · Privacy officers · Compliance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.