Tennessee · verified official-source register

Tennessee Privacy Enforcement Cases

3 approved, official-source case records from the 50-state register. Dates, amounts, legal context and disposition qualifications are supported by the cited evidence.

3 primary case-source links · 3 unique primary source URLs

Last editorial review (targeted corrections): · Last link check (automated availability check):

Actual case links

Tennessee case register

Each record cites an official Attorney General or state-agency source. Shared multistate amounts should not be summed as unique state penalties. Additional verification sources are identified when an amount has been reconciled.

Verified case 1 of 3

Medical Informatics Engineering, Inc. and NoMoreClipboard LLC

Date
May 29, 2019
Amount
$900,000 total; Tennessee receiving $21,238
Legal basis
Health Insurance Portability and Accountability Act (HIPAA); state Unfair and Deceptive Practice laws; Notice of Data Breach statutes; state Personal Information Protection Acts

Why the action was brought

Hackers infiltrated MIE’s WebChart application between May 7 and May 26, 2015, stealing electronic Protected Health Information of more than 3.9 million individuals. The compromised data included names, contact information, usernames, hashed passwords, Social Security numbers, health information, insurance information, diagnoses, and other personal data, allegedly violating HIPAA and state laws.

View Official Case Source ↗ (opens in a new tab)

Verified case 2 of 3

Anthem

Date
2020-10-02
Amount
$39.5 million; Tennessee’s share: $400,556.46
Legal basis
No statutes or laws cited

Why the action was brought

In 2014, cyber attackers infiltrated Anthem’s systems and harvested names, dates of birth, Social Security numbers, healthcare identification numbers, home and email addresses, phone numbers, and employment information for 78.8 million Americans, including 773,763 Tennessee residents. The document does not identify a specific failure or statutory violation, but Anthem agreed to data-security and governance requirements.

View Official Case Source ↗ (opens in a new tab)

Verified case 3 of 3

Equifax

Date
2019-07-22
Amount
$600 million total settlement; Consumer Restitution Fund of up to $425 million, including $300 million dedicated to consumer redress and up to an additional $125 million; $175 million payment to the states; Tennessee’s share: $3,516,675.07
Legal basis
No specific statutes or laws cited in the document

Why the action was brought

Equifax’s 2017 breach exposed social security numbers, names, dates of birth, addresses, credit card numbers, and sometimes driver’s license numbers of more than 147 million consumers. The investigation found Equifax failed to maintain reasonable security, fully patch a known critical software vulnerability, and replace monitoring software, allowing attackers unnoticed access for 76 days.

View Official Case Source ↗ (opens in a new tab)

This register contains approved, official-source privacy, data-breach and data-security enforcement records. Read any case-specific court-approval qualification; inclusion does not confirm payment or final judgment. Shared multistate amounts should not be summed as unique state penalties.

Educational information, not legal advice.

Back to TennesseeAll states

Original case-library snapshot: August 23, 2026. Original state-law research cutoff: August 25, 2026. Monetary-library update: September 16, 2026, not a new full 50-state research cutoff. Targeted Indiana and New Hampshire law review: October 19, 2026 only. Source inclusion does not independently confirm final court entry or payment.