MD Anderson to pay $4.3 million penalty for data breach

A federal judge has imposed a $4.3 million fine against the University of Texas MD Anderson Cancer Center for failing to properly secure health records of 35,000 people. The case stems from three incidents in 2012 and 2013 when an employee laptop was stolen and two thumb drives went missing. It is the fourth largest fine ever imposed for a HIPAA violation.