UPMC agrees to pay $2.7M to settle 2014 data breach lawsuit

A hacker in 2014 gained access to UPMC’s HR database to steal and sell employee data, which was subsequently used to file fraudulent tax returns and get related tax refunds.