CHS lacked a Drug Enforcement Agency license necessary for exporting controlled substances from the United States to Iraq. CHS obtained controlled substances by having CHS physicians based in Florida send letters requesting that a South African physician prescribe the controlled substances. A South African shipping company then received controlled substances that were not approved by the FDA or EMA and sent them to CHS in Iraq, where CHS supplied the unapproved controlled substances to patients under the State Department and Air Force contracts. "This settlement demonstrates the department's commitment to use its civil enforcement tools to pursue government contractors that fail to follow required cybersecurity standards, particularly when they put confidential medical records at risk," said Principal Deputy Assistant Attorney General Brian M. Boynton, head of the Justice Department's Civil Division.