April 4, 2018

New Jersey announced that Virtua Medical Group, P.A. (“VMG”), a network of physicians exclusively affiliated with more than 50 South Jersey medical and surgical practices, has agreed to pay $417,816 and improve data security practices to settle allegations it failed to properly protect the privacy of more than 1,650 patients whose medical records were made viewable on the internet as a result of a server misconfiguration by a private vendor. VMG, a non-profit New Jersey captive Professional Association of Virtua Health Inc. headquartered in Marlton, agreed to the settlement terms after the Division’s investigation concluded that VMG’s failure to comply with federal healthcare data security standards publically exposed the medical information – including patient names, medical diagnoses and prescriptions – of up to 1,654 individuals treated at Virtua Surgical Group in Hainesport, and Virtua Gynecological Oncology Specialists and Virtua Pain and Spine Specialists in Voorhees. NJ