An unsecured spreadsheet containing personal data on 660 subscribers to the Affordable Care Act health insurance exchange in Vermont has led the state to impose a $264,000 penalty on an IT services firm. The North Carolina-based company is a provider of cloud-based IT support service. Samanage USA Ltd. agreed to improve its information security and compliance program under the terms of a settlement with the state’s attorney general. Vermont can fine organizations $10,000 per breach violation under state law.”]
Source: https://www.cuinfosecurity.com/hefty-penalty-for-smallish-breach-in-vermont-a-10352