Touchstone Medical Imaging, a provider of diagnostic imaging services in the United States, has been fined $3 million by the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) Investigators concluded that the clinic has been negligent handling sensitive health records. In May 2014, Touchstone was notified by the FBI and OCR that its servers were leaking patient health information (PHI) on the Internet. Touchstone initially denied it was exposing patient health records, but an investigation into the matter later revealed that Touchstone had indeed mishandled more than 300,000 records.”]