Vendor that mishandled Pennsylvania virus data to pay $2.7 million in federal whistleblower case