URMC fined $3 million over data breach

The University of Rochester Medical Center has agree to pay a $3 million settlement for HIPPA violations.

The Department of Health and Human Services says it stems from incidents in 2013 and 2017 involving the loss of an unecrypted flash drive and laptop that contained patient information.

In addition to the fine, the URMC will have to follow a corrective action plan and will be monitored for the next two years.

Read more from 13WHAM-TV