PHOENIX — The Arizona Attorney General’s office said a settlement has been reached in the first health care data breach lawsuit involving numerous states.

The office said Tuesday the deal was reached with health care software provider Medical Informatics Engineering Inc. and NoMoreClipboard LLC, which will pay the states $900,000 and improve data security. The case was filed in Indiana, home to Medical Informatics.

The lawsuit sprang from a May 2015 data breach. Hackers infiltrated a web application run by Medical Informatics and stole the health information of more than 3.9 million individuals. Information included names, Social Security numbers, lab results and diagnoses.

Also participating in the case were Arkansas, Connecticut, Florida, Indiana, Iowa, Kansas, Kentucky, Louisiana, Michigan, Minnesota, Nebraska, North Carolina, Tennessee, West Virginia and Wisconsin.