Court Rules
All enforcement actions
Enforcement ActionLow Risk

CT AG Alleges Prospect Mismanagement Caused Ransomware Data Breach

Prospect Medical HoldingsFebruary 11, 2025Connecticut Attorney General

Consumers Affected

212,369

Summary

Connecticut filed a statement of interest in the bankruptcy of Prospect Medical Holdings, alleging years of mismanagement that harmed patients and led to a ransomware attack compromising the data of 212,369 residents. The state seeks to ensure a responsible transition of hospitals and hold Prospect accountable for its misconduct.

Contract Impact

In-house legal teams should review contracts with healthcare providers to ensure robust data security and privacy clauses, particularly for health information. Include provisions for bankruptcy scenarios, timely vendor payments to prevent service disruptions, and compliance with healthcare and safety standards. Also, verify data breach notification requirements and response protocols.

Contract Search Terms

data securityhealth information privacybankruptcy sale processvendor payment termspension plan obligationspatient care standardsransomware responsedata breach notificationhospital transition agreementsregulatory compliance

Laws Cited

Bankruptcy Code

Violation Types

Entity Details

Entity

Prospect Medical Holdings

Industry

Healthcare

Official Sources

Source Evidence

Entity Name
"Prospect Medical Holdings"
Violation Types
"On July 31, 2023, a threat actor gained access to Prospect’s IT systems, ultimately deploying a malicious ransomware code that locked Prospect out of its own systems and compromised the private data of 212,369 Connecticut residents."
Laws Cited
"the Bankruptcy Code"

Related Enforcement Actions

CT

National Highway Traffic Safety Administration

Connecticut Attorney General William Tong joined a coalition of states and local governments in filing suit against NHTSA over its rule weakening fuel economy standards for new passenger cars and light trucks. The lawsuit alleges the rule violates the agency’s statutory mandate and the Administrative Procedure Act; no penalty or final remedy is reported.

CT

U.S. Environmental Protection Agency

Connecticut Attorney General William Tong joined a multistate coalition suing the EPA over its repeal of greenhouse gas pollution limits for power plants and separately filed a notice of intent to sue over regulation of existing gas plants. The coalition asks the court to overturn the repeal and restore the protections; the release reports no monetary penalty or final order.

CT

Sandoz Inc. and Fougera Pharmaceuticals Inc.

$400.0M

Connecticut Attorney General William Tong announced a $400 million settlement with Sandoz Inc. and Fougera Pharmaceuticals Inc. resolving allegations that the generic drug manufacturers conspired to inflate prices, limit competition, and restrain trade. The settlement includes consumer restitution and injunctive reforms; court approval was being sought.

CT

U.S. Department of Homeland Security

Connecticut Attorney General William Tong joined a coalition of 21 attorneys general in submitting a comment letter opposing a DHS rule that allows certain affirmative asylum applications to be referred to removal proceedings without an asylum officer interview. The coalition argues the rule violates federal law and harms asylum seekers, including unaccompanied children; this was a policy opposition letter, not a privacy enforcement action.

CT

NextEra Energy and Dominion Energy

Connecticut and Massachusetts co-led a coalition protest urging FERC to reject the proposed NextEra Energy-Dominion Energy merger. The coalition argued that the merger could increase market power and threaten energy affordability, reliability, and competition; the release does not report a final enforcement decision or penalty.

CT

Unspecified home improvement contractors

Connecticut officials warned residents about potential home improvement scams before an approaching nor’easter, including unlicensed contractors, high-pressure sales tactics, and demands for full payment upfront. The release provides consumer guidance on checking contractors and contract requirements; it does not announce an enforcement action or penalty against a named entity.