On March 11, 2021, Attorney General William Tong of Connecticut announced a settlement with American Medical Collection Agency (AMCA) related to a multistate investigation into a 2019 data breach.[1] AMCA specialized in small-balance medical debt collection primarily related to laboratories and medical testing facilities. From Aug. 1, 2018, to March 30, 2019, an unauthorized user gained access to AMCA’s system. AMCA did not detect the intrusion, and personal information, including Social Security numbers, payment card information, names of medical tests, and diagnostic codes were compromised.