Ambulance Billing Firm Pays $515K Fine to 2 States in Hack

Use this page to get oriented quickly.

The brief below is a reading aid. The original source material and source link remain the governing reference.

Operational Brief

- Comstar paid $515,000 to Massachusetts and Connecticut regulators for a 2022 hacking incident affecting nearly 350,000 residents. - The firm also paid $75,000 last year to settle HIPAA allegations related to the same breach.

Why It Matters for Texas Credit Unions

The article does not mention Texas or any Texas-specific entities.

Who this most likely affects

Bounded site guidance: This item is most likely relevant for credit unions with material information-security, technology, or vendor-management exposure.

Why this fit: The source language points to cyber, technology, or third-party oversight risk.

This is site guidance, not a formal determination. CU InfoSecurity and the original source material remain the governing reference.

Private Follow-Up

Save this for follow-up.

Sign in to keep a private note, target date, or reminder for this item.

Sign in to save this item Create account

Original Source Material

Comstar Paid Feds $75K Last Year to Settle HIPAA Allegations in Same 2022 Breach An ambulance billing and collections firm has agreed to pay $515,000 to Massachusetts and Connecticut regulators and implement a prescriptive information security program in the aftermath of a 2022 hacking incident affecting the sensitive information of nearly 350,000 residents in those states.