resolution agreement
Ambry Genetics to Pay $700,000 After Phishing Attack Exposed 225,000 Patients' Health Data: $700,000
Resolution Sep 2026
Penalty
$700,000
Action type
Resolution agreement
Entity profile
—
Case number
—
What went wrong
Ambry Genetics to Pay $700,000 After Phishing Attack Exposed 225,000 Patients' Health Data
Timeline
- ResolutionSep 2026
- Incident and investigation milestones are not consistently published by OCR in machine-readable form.
Key takeaways for your organization
- Align policies, procedures, and evidence with the specific CFR provisions cited in OCR resolutions affecting your entity type.
- Run tabletop exercises for breach response, OCR inquiry handling, and privilege-preserving communications with counsel.
- Revisit business associate inventory and downstream vendor security assurances after major enforcement themes in your sector.
Related actions
Allergy Practice pays $125,000 to settle doctor's disclosure of patient information to a reporter
—
$125,000
Judge rules in favor of OCR and requires a Texas cancer center to pay $4.3 million in penalties for HIPAA violations
—
$4,300,000
Careless handling of HIV information jeopardizes patient’s privacy, costs entity $387k
—
$387
Source
U.S. Department of Health and Human Services release
Source: U.S. Department of Health and Human Services, Office for Civil Rights. medcomply.ai aggregates public materials for educational use, not legal advice.