CHARLESTON – A $ 5 million multi-state agreement has been reached with a major hospital operator in connection with an August 2014 data breach.
The terms require Community Health Systems Inc., also known as CHS, to pay $ 5 million to 27 states, including West Virginia, which are party to the agreement. It also requires CHS to implement and maintain a comprehensive information security program designed to safeguard personal and protected health information.
CHS owned, leased, or operated 206 affiliated hospitals when the breach occurred, including five West Virginia entities: Oak Hill Clinic Corp., Oak Hill Hospital Corp., Bluefield Clinic Company LLC, Greenbrier Valley Anesthesia LLC, Greenbrier Valley Emergency Physicians, and Ronceverte Physician Group.
The Tennessee-based company retains control of just 92 hospitals, including Ronceverte’s Greenbrier Valley Medical Center and Oak Hill Plateau Medical Center, according to its website.
West Virginia will receive an allocation of $ 73,897, and CHS patients in the state will benefit from the stringent safety protocols implemented as part of the deal, Attorney General Patrick Morrisey said.