N.Y. state AG settles with health services company over delayed data breach notification

Having a data breach was bad enough for one health services company, but failing to notify affected persons made things worse.