By Richard ChumneyJournal InquirerHARTFORD, Conn. — An ambulance billing company has agreed to pay Connecticut and Massachusetts $515,000 for a 2022 data breach that exposed the private information of nearly 350,000 residents, officials said. The Massachusetts-based Comstar, LLC has also agreed to implement a series of digital security measures and conduct annual security assessments, according to Connecticut Attorney General William Tong. The breach exposed the Social Security numbers, driver’s license numbers, financial account numbers and medical assessment information of about 326,426 Massachusetts residents and 22,829 Connecticut residents, Tong said. Tong said Comstar violated security and consumer protection laws by failing to maintain an adequate security program to prevent the attack, conduct regular risk assessments and implement reasonable data retention policies. The company said in a 2022 data breach notice that it immediately took steps to confirm the security of its systems and warned customers to watch out for identity theft.