HHS settles cybersecurity investigation with Montefiore Medical Center

The nonprofit will pay $4.75 million to settle allegations that data security failures allowed an employee to steal and sell the protected health information of thousands of patients, according to the HHS.