Comstar, LLC HIPAA Resolution Agreement and Corrective Action Plan

Fri, 13 Mar 2026 12:30:47 +0000
Data Privacy

The US Department of Health and Human Services (HHS) has entered into a resolution agreement with Comstar, LLC, a business associate under HIPAA. Comstar will pay $75,000 and comply with a corrective action plan to resolve alleged violations of HIPAA's Privacy, Security, and Breach Notification Rules following a ransomware attack affecting 585,621 individuals.