HIPAA Journal

MARCH 24, 2022

Chelan Douglas Health District in East Wenatchee, WA, has announced it was the victim of a cyberattack in July 2021 in which the personal and protected health information of patients was exfiltrated from its systems. A representative for the health district said this was not a ransomware attack.

Ransomware 136

Ransomware Fraud Hospitals HIPAA 136

HIPAA Journal

MAY 16, 2022

According to the April 29, 2022, notification on the healthcare provider’s website, “We recently discovered unauthorized access to our network occurred between May 31, 2021, and June 1, 2021.” The post Refuah Health Center Alerts 260K Patients About May 2021 Cyberattack appeared first on HIPAA Journal.

Health Insurance 117

Health Insurance Ransomware HIPAA Licensing 117

HIPAA Journal

AUGUST 3, 2022

PracticeMax said it identified suspicious activity within its network on May 1, 2021, and confirmed that ransomware was installed on its network. The two health insurance firms confirmed they had been affected in late February 2022, with PracticeMax publicly reporting the breach in the fall of 2021.

Ransomware 114

Ransomware Health Insurance Licensing HIPAA 114

HIPAA Journal

MARCH 11, 2022

Protenus has released its 2022 Breach Barometer Report which confirms 2021 was a particularly bad year for healthcare industry data breaches, with more than 50 million healthcare records exposed or compromised in 2021. There were 111 insider incidents in 2021, similar to the 110 incidents in 2019, which is a 26% decrease from 2020.

HIPAA 114

HIPAA Ransomware Health Insurance 114

HIPAA Journal

DECEMBER 24, 2022

Penalties for HIPAA violations can be issued by the Department of Health and Human Services’ Office for Civil Rights (OCR) and state attorneys general. In addition to financial penalties, covered entities are required to adopt a corrective action plan to bring policies and procedures up to the standards demanded by HIPAA. .

HIPAA 124

HIPAA Compliance Hospitals COVID-19 124

HIPAA Journal

DECEMBER 31, 2022

To best answer the question what is a HIPAA violation, it is necessary to explain what HIPAA is, who it applies to, and what constitutes a violation; for although most people believe they know what a HIPAA compliance violation is, evidence suggests otherwise. What is HIPAA and Who Does It Apply To?

HIPAA 133

HIPAA Due Diligence Compliance Fraud 133

Compliancy Group

JANUARY 24, 2025

A clear understanding of health information breaches is necessary to comply with regulations like the Health Insurance Portability and Accountability Act (HIPAA). In 2021 and 2022, 45.9 Its not just the number of healthcare data breaches that cause concern. million records, respectively, were breached.

Compliance 94

Compliance Electronic Medical Records Ransomware HIPAA 94

Total HIPAA

MARCH 7, 2023

Health insurance agents became covered under HIPAA with the HITECH Act of 2009. The inclusion of insurance agents was a response to the increasing use of electronic health records and the need to safeguard patients’ medical information.

HIPAA 98

HIPAA US Department of Health and Human Services Compliance Health Insurance 98

HIPAA Journal

MARCH 2, 2022

The Health Insurance Accountability and Portability Act (HIPAA) introduced multiple HIPAA rights. Unfortunately, the failure to comply with Privacy Rule HIPAA rights is one of the leading reasons for complaints to the HHS Office for Civil Rights. Rights under the Privacy Rule.

HIPAA 103

HIPAA Health Insurance Public Health Compliance 103

HIPAA Journal

SEPTEMBER 12, 2023

Seymour, IN-based Schneck Medical Center has settled a lawsuit with the Indiana attorney general, Todd Rokita, over a 2021 ransomware attack and data breach that affected 89,707 Indiana residents.

HIPAA 103

HIPAA Ransomware Health Insurance Fraud 103

HIPAA Journal

MARCH 28, 2023

A New York law firm that suffered a LockBit ransomware attack has agreed to pay a financial penalty of $200,000 to the New York Attorney General to resolve alleged violations of New York General Business Law and the Privacy and Security Rules of the Health Insurance Portability and Accountability Act (HIPAA).

HIPAA 111

HIPAA Ransomware Malpractice Health Insurance 111

HIPAA Journal

MARCH 29, 2022

The Department of Health and Human Services’ Office for Civil Rights (OCR) has announced its first financial penalties of 2022 to resolve alleged violations of the Health Insurance Portability and Accountability Act (HIPAA). Dental Practitioner Fined $30,000 for Noncompliance with the HIPAA Right of Access.

HIPAA 124

HIPAA Compliance Health Insurance 124

Healthcare IT Today

SEPTEMBER 28, 2023

The following is a guest article by Bill Young, Director of Healthcare & Life Sciences at SYSTRAN Keeping patient data confidential and secure remains a major healthcare challenge today, more than 25 years after the introduction of the 1996 Health Insurance Portability & Accountability Act or HIPAA.

HIPAA 128

HIPAA US Department of Health and Human Services Governance Health Insurance 128

HIPAA Journal

MAY 18, 2023

The Department of Health and Human Services’ Office for Civil Rights is the main enforcer of HIPAA compliance; however, state Attorneys General also play a role in enforcing compliance with the Rules of the Health Insurance Portability and Accountability Act (HIPAA). Community Health Systems/CHSPSC, Anthem Inc.,

HIPAA 103

HIPAA Compliance Ransomware Hospitals 103

HIPAA Journal

MARCH 15, 2023

The United States Department of Justice has agreed to settle alleged False Claims Act violations with Jelly Bean Communications Design LLC and manager Jeremy Spinks related to the failure to protect HIPAA-covered data. FHKC is a state-created entity that offers health and dental insurance to children in Florida between the ages of 5 and 18.

Health Insurance 99

Health Insurance HIPAA Fraud Due Diligence 99

HIPAA Journal

FEBRUARY 28, 2023

Department of Health and Human Services (HHS) has restructured its Office for Civil Rights (OCR) and has created new divisions that will help improve the enforcement of HIPAA and civil rights laws and clear the current backlog of complaints and investigations. Approximately 80% of all reported data breaches are due to hacking.

HIPAA 111

HIPAA Health Insurance Compliance 111

HIPAA Journal

MAY 2, 2022

6 data breaches have recently been reported by HIPAA-regulated entities that have collectively resulted in the exposure and potential theft of the protected health information of tens of thousands of individuals. Los Angeles County Department of Mental Health, California. La Casa de Salud, New York.

HIPAA 112

HIPAA Health Insurance Licensing Hospitals 112

Compliancy Group

MAY 27, 2022

Almost as surely as summer follows spring, lawsuits follow breaches of protected health information. Here’s a roundup of recent HIPAA breach lawsuits and settlements. Lawsuits Increasing Following HIPAA Breaches – Facts and Figures. Let’s Simplify Compliance HIPAA and cybersecurity go hand-in-hand.

HIPAA 98

HIPAA Ransomware Hospitals Health Insurance 98

HIPAA Journal

JUNE 28, 2022

The HHS’ Office for Civil Rights (OCR) Breach Portal includes breaches of the personally identifiable protected health information (PHI), such as unauthorized access and disclosures, exposures, and the loss and theft of PHI. OCR is the main enforcer of compliance with the Health Insurance Portability and Accountability Act (HIPAA).

HIPAA 98

HIPAA Health Insurance Compliance Governance 98

HIPAA Journal

DECEMBER 23, 2022

It has been another bad year for healthcare data breaches, with some of the biggest HIPAA breaches of 2022 resulting in the impermissible disclosure of well over a million records. The Biggest HIPAA Breaches of 2022. The 12 biggest HIPAA breaches of 2022 affected almost 22.66 million patients and health plan members.

HIPAA 105

HIPAA Ransomware Health Insurance Compliance 105

HIPAA Journal

NOVEMBER 16, 2022

Unauthorized individuals have gained access to the email system of the Administrative Fund of the Detectives’ Endowment Association of the Police Department of the City of New York (NYCDEA) and potentially viewed or obtained the protected health information of 21,544 individuals.

HIPAA 111

HIPAA Licensing Health Insurance Fraud 111

HIPAA Journal

FEBRUARY 23, 2022

Logan Health Medical Center in Kalispell, MT, has recently started notifying certain patients that hackers gained access to a file server that housed patient information in “a highly sophisticated criminal attack.”. NHS Management Alerts Patients About May 2021 Cyberattack.

Electronic Medical Records 142

Electronic Medical Records HIPAA Health Insurance Medical Billing 142

HIPAA Journal

MARCH 11, 2022

Legal action is being taken against Logan Health and subsidiary, sister, and related entities of Logan Health over a data breach that occurred in 2021 and affected 213,543 Logan Health Medical Center patients. The lawsuit points out that data breach was one of several to have affected Logan Health.

HIPAA 135

HIPAA Health Insurance Medical Billing Fraud 135

HIPAA Journal

JUNE 22, 2022

A review of the affected files confirmed they contained information such as names, dates of birth, medical assessment and medication information, health insurance information, and Social Security numbers. The breach was detected on December 27, 2021, and it was determined on January 7, 2022, that patient data had been compromised.

HIPAA 98

HIPAA Health Insurance 98

HIPAA Journal

AUGUST 28, 2023

The latest settlement agreement relates to a complaint made against UHIC by a customer who had requested a copy of their PHI in January 2021. The agency initiated an investigation in April 2021, but it was not until July that the customer received the PHI they had requested six months earlier.

HIPAA 94

HIPAA Health Insurance Compliance 94

Health Populi

JUNE 10, 2021

adult 18 and over in April 2021 to gather data for this annual report. 20% of people used online health services, and 20% intent to keep using them. In 2021, smartwatch adoption exceeded wearable activity fitness tracker market penetration, both around one-third of U.S. CTA conducted an online survey among 2,409 U.S.

HIPAA 173

HIPAA COVID-19 Health Insurance Health Outcomes 173

HIPAA Journal

MARCH 14, 2022

Capital Region Medical Center (CRMC) in Jefferson City, MO has recently confirmed patient information was accessed by unauthorized individuals in a December 2021 cyberattack that took its network and phone systems offline for several days. The attack was detected on December 17, 2021, when network systems were disrupted.

Electronic Medical Records 142

Electronic Medical Records Health Insurance HIPAA Licensing 142

HIT Consultant

OCTOBER 23, 2024

In 2021, investments in telehealth companies surpassed $29.1 The doctors will review the information before saving it in electronic medical records (EMRs) and transferring it to other digital health systems, i.e., e-pharmacy or digital health insurance.

Telemedicine 124

Telemedicine Doctors Electronic Medical Records COVID-19 124

HIPAA Journal

JULY 11, 2022

Phoenixville Hospital Fires Employee for HIPAA Violation. According to the hospital operator, Tower Health, the unauthorized access was discovered during a routine audit of medical record access logs. Some of the accessed records included partial Social Security numbers and health insurance information.

Hospitals 123

Hospitals HIPAA Health Insurance Licensing 123

HIPAA Journal

JANUARY 2, 2023

The settlements pursued by the Department of Health and Human Services’ Office for Civil Rights (OCR) are for egregious violations of HIPAA Rules. Settlements are also pursued to highlight common HIPAA violations to raise awareness of the need to comply with specific aspects of HIPAA Rules.

HIPAA 107

HIPAA Compliance Hospitals Medicare 107

HIPAA Journal

MARCH 10, 2022

Bako Diagnostics (BakoDx), a Georgia-based provider of laboratory services to healthcare providers, has announced it was the victim of a cyberattack that was discovered on December 28, 2021. The files exfiltrated from its systems included the protected health information of patients.

Ransomware 140

Ransomware Licensing Health Insurance HIPAA 140

HIPAA Journal

FEBRUARY 16, 2022

Philadelphia FIGHT Community Health Centers has recently announced it was the victim of a cyberattack on November 30, 2021. The information potentially compromised in the attack included names, dates of birth, Social Security numbers, medical diagnoses, treatment information, and health insurance information.

Electronic Medical Records 124

Electronic Medical Records Health Insurance Licensing HIPAA 124

HIPAA Journal

FEBRUARY 15, 2022

Chicago’s South Shore Hospital has started notifying 115,670 current and former patients about a December 2021 cyberattack on its network. Suspicious activity was identified on its network on December 10, 2021, and prompt action was taken to contain the incident.

Hospitals 124

Hospitals Health Insurance HIPAA Medicaid 124

HIPAA Journal

MARCH 11, 2025

A settlement has been agreed to resolve a lawsuit against the Rhode Island Public Transit Authority (RIPTA) and UnitedHealthcare New England (UHC) over a 2021 ransomware attack. RIPTA announced the data breach on December 23, 2021.The

Ransomware 51

Ransomware Fraud HIPAA Health Insurance 51

HIPAA Journal

MARCH 9, 2022

The Birmingham, AL-based multi-specialty clinic, Norwood Clinic, has recently started notifying 228,103 individuals that some of their protected health information was accessed in a cyberattack that was detected on October 22, 2021. The review was concluded on February 2, 2022, and affected customers were updated on February 14, 2022.

Electronic Medical Records 131

Electronic Medical Records Health Insurance Ransomware HIPAA 131

HIPAA Journal

MARCH 4, 2022

Miami Lakes, FL-based Catholic Health Services has discovered the email accounts of three Catholic Hospice employees have been accessed by unauthorized individuals. Crossroads Health in Ohio has experienced a cyberattack that disrupted some of its IT systems. Bible Fellowship Church Homes, Inc.

Health Insurance 130

Health Insurance HIPAA Licensing 130

HIPAA Journal

APRIL 7, 2022

SuperCare Health, a Downey, CA-based post-acute, in-home respiratory care provider serving the Western United States, has recently started notifying 318,379 patients that some of their protected health information has been exposed and potentially accessed by unauthorized individuals in a cyberattack that occurred in July 2021.

Licensing 137

Licensing HIPAA Health Insurance Hospitals 137