HHS OCR Fines Firm $10K in Breach Affecting 15M

HIPAA Settlement Small Compared to Many Others Marianne Kolbasuk McGee (HealthInfoSec) • March 6, 2026

U.S. federal regulators fined a dental practice software vendor with a seemingly lowball financial penalty for a high-stakes 2020 hack affecting 15 million individuals that the company failed to report.

See Also: OnDemand Webinar | Navigating Complex Compliance Requirements with Identity Governance and Administration (IGA)

The Department of Health and Human Services on Thursday said Maryland-based MMG Fusion has agreed to pay a $10,000 financial settlement and will implement a corrective action plan that regulators will monitor for three years.

The low dollar amount of the settlement - compared with much higher HIPAA fines paid in smaller protected health ...