Epic got GuardDog to heel. But the stipulated judgment does not close the book for healthcare providers whose patient records may have been pulled, or answer whether they have a reportable breach. With patient class actions already in play, “Epic handled it” is not an incident response plan.
