AG Tong and AG Campbell today announced that Connecticut and Massachusetts have reached a $515,000 settlement with Comstar, LLC, a Massachusetts-based ambulance billing vendor, for failing to safeguard sensitive patient information during a March 2022 data breach that potentially affected the Social Security numbers, driver’s license numbers, financial account numbers, and medical assessment information of approximately 326,426 Massachusetts residents and 22,829 Connecticut residents.

“Comstar failed to implement basic, necessary security measures, and as a result exposed the Social Security numbers, medical records, driver’s license numbers and financial information for hundreds of thousands of Connecticut and Massachusetts residents. In addition to a significant monetary payment, our settlement requires Comstar to adopt strong security measures going forward and sends a clear message that Connecticut will continue to aggressively enforce our data security laws,” – AG Tong