PHOENIX — The Arizona Attorney General's Office says a settlement has been reached in the first health care data breach lawsuit involving numerous states.

The states include Nebraska and Iowa.

The office said Tuesday the deal was reached with health care software provider Medical Informatics Engineering and NoMoreClipboard, which will pay the states $900,000 and improve data security. The case was filed in Indiana, home to Medical Informatics.

The lawsuit sprang from a May 2015 data breach. Hackers infiltrated a web application run by Medical Informatics and stole the health information of more than 3.9 million individuals. Information included names, Social Security numbers, lab results and diagnoses.

Also participating in the case were Arkansas, Connecticut, Florida, Indiana, Kansas, Kentucky, Louisiana, Michigan, Minnesota, North Carolina, Tennessee, West Virginia and Wisconsin.

Sign up for The World-Herald's afternoon updates

Receive a summary of the day’s popular and trending stories from Omaha.com.

© 2019 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.