In a groundbreaking development, the U.S. Department of Health and Human Services (HHS) has reached a settlement with Lafourche Medical Group, a Louisiana-based medical facility, following a phishing cyberattack that compromised the electronic protected health information of nearly 35,000 patients. This marks the first settlement under HIPAA related to a phishing attack, following the first case related to ransomware just earlier this year.