The U.S. Department of Health and Human Services’ Office for Civil Rights has settled with MedEvolve for $350,000 over potential HIPAA violations regarding a data breach in which a server containing protected health information was left unsecure and accessible over the internet.