PHOENIX (AP) — The Arizona Attorney General's office says a settlement has been reached in the first health care data breach lawsuit involving numerous states.

The office said Tuesday the deal was reached with health care software provider Medical Informatics Engineering Inc. and NoMoreClipboard, LLC, which will pay the states $900,000 and improve data security. The case was filed in Indiana, home to Medical Informatics.

The lawsuit sprang from a May 2015 data breach. Hackers infiltrated a web application run by Medical Informatics and stole the health information of more than 3.9 million individuals, including 26,000 in Arizona. Information included names, Social Security numbers, lab results and diagnoses.