article thumbnail

Third-Party Cyberattacks: The Healthcare Sector’s Achilles’ Heel

HIT Consultant

This includes thorough due diligence before onboarding new vendors, continuous monitoring of their security practices, and clear contractual agreements that outline security expectations. Previously, they worked at Alliantist for 8 years, from January 2013 to May 2021, as Head of Products and Services.

article thumbnail

Settlement Agreed with Florida Children’s Health Insurance Website Contractor to Resolve False Claims Act Allegations

HIPAA Journal

FHKC contracted with Jelly Bean Communications Design on October 13, 2013, to provide web design, programming, and hosting services. The review of the website found multiple outdated and vulnerable applications and the website had not been patched since November 2013.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

What is a HIPAA Violation?

HIPAA Journal

Since the publication of the Final Omnibus Rule in 2013, Business Associates have had the same requirements as Covered Entities to comply with the Privacy, Security, and Breach Notification Rules as found in 45 CFR Parts 160, 162, and 164.

HIPAA 133
article thumbnail

Healthcare Data Breach Statistics

HIPAA Journal

WI Business Associate 4,112,892 Hacking/IT Incident 24 2023 Colorado Department of Health Care Policy & Financing CO Health Plan 4,091,794 Hacking/IT Incident 25 2013 Advocate Health and Hospitals Corporation, d/b/a Advocate Medical Group IL Healthcare Provider 4,029,530 Theft 26 2024 Concentra Health Services, Inc.

HIPAA 111
article thumbnail

Another Resolution by DOJ Pursuant to its Civil Cyber-Fraud Initiative Highlights Continued Efforts to Hold Companies Accountable for Ensuring Data are Secured

Health Care Law Brief

In 2013, Jelly Bean contracted with the Florida Health Kids Corporation (“ FHKC ”)—a state-created entity that offers health and dental insurance for Florida children—to create, host, and maintain HealthyKids.org, where, in part, parents and others could apply for state Medicaid insurance coverage for eligible children.

Fraud 52
article thumbnail

How HHS-OIG, Regulators Enforce Vendor Compliance

Provider Trust

Moon , for submitting claims while excluded from March 2006 through July 2013. In addition to exclusion monitoring of individuals within your workforce and provider networks, you are responsible for ensuring your vendors are clear of any state or federal exclusion lists, such as the OIG’s List of Excluded Individuals and Entities (LEIE).

article thumbnail

Understanding Compliance for Healthcare Vendors

Provider Trust

For healthcare organizations, vendor services require a more thorough and specific due diligence in order to assess risk and to document compliance with any or all of the following regulations and laws listed below: . It also includes suppliers.