The Pennsylvania Attorney General ('AG'), Josh Shapiro, announced, on 11 March 2021, alongside 41 other state AGs, a $21 million settlement with Retrieval-Masters Creditors Bureau, conducting businesses as the American Medical Collection Agency ('AMCA'), resolving a multi-state investigation into the 2019 data breach that exposed the personal information of over 7 million individuals. In particular, under the terms of the settlement, AMCA and its principals have agreed to implement and maintain a series of data security practices designed to strengthen its information security program and safeguard the personal information of consumers, these include: creating and implementing an informatio
News
USA: 41 State AGs announce $21M settlement against AMCA following data breach
March 12, 2021
Summary
The Pennsylvania Attorney General, Josh Shapiro, along with 41 other state AGs, reached a $21 million settlement with Retrieval-Masters Creditors Bureau, also known as AMCA, due to a 2019 data breach affecting over 7 million individuals. The settlement requires AMCA to implement a robust information security program, appoint a Chief Information Security Officer, undergo third-party security assessments, and cooperate with ongoing investigations. Although the settlement stipulates a $21 million payment, it is suspended based on AMCA's financial condition, provided they adhere to the settlement terms.