With Joanna Bergmann, Christine Moundas
Notably, to investigate whether systemic vulnerabilities contributed to the breach, OCR may request documentation going back six years.