Health Company Agrees to Pay HHS $1.2M After Security Breach