HHS settles first phishing cyberattack investigation with Louisiana medical group

The agency found Lafourche Medical Group failed to conduct a risk analysis or regularly review its information system activity. The 2021 breach may have exposed nearly 35,000 patients’ data.