HIPAA Journal

DECEMBER 24, 2022

Penalties for HIPAA violations can be issued by the Department of Health and Human Services’ Office for Civil Rights (OCR) and state attorneys general. In addition to financial penalties, covered entities are required to adopt a corrective action plan to bring policies and procedures up to the standards demanded by HIPAA. .

HIPAA 128

HIPAA Compliance Hospitals COVID-19 128

HIPAA Journal

OCTOBER 26, 2022

The American Civil Liberties Union of Rhode Island (ACLU of RI) is taking legal action against the Rhode Island Public Transit Authority (RIPTA) and UnitedHealthcare New England (UHC) over an August 2021 data breach that affected more than 22,000 individuals.

HIPAA 116

HIPAA Fraud Health Insurance 116

HIPAA Journal

FEBRUARY 24, 2022

Two HIPAA-regulated entities have recently started notifying individuals whose protected health information was potentially compromised in cyberattacks that occurred more than 12 months ago, including one where it took 18 months to notify affected individuals that their protected health information had been accessed and potentially acquired.

HIPAA 115

HIPAA Ransomware Health Insurance 115

HIPAA Journal

DECEMBER 31, 2022

To best answer the question what is a HIPAA violation, it is necessary to explain what HIPAA is, who it applies to, and what constitutes a violation; for although most people believe they know what a HIPAA compliance violation is, evidence suggests otherwise. What is HIPAA and Who Does It Apply To?

HIPAA 135

HIPAA Due Diligence Compliance Fraud 135

Total HIPAA

MARCH 7, 2023

Health insurance agents became covered under HIPAA with the HITECH Act of 2009. The inclusion of insurance agents was a response to the increasing use of electronic health records and the need to safeguard patients’ medical information.

HIPAA 98

HIPAA US Department of Health and Human Services Compliance Health Insurance 98

HIPAA Journal

MARCH 28, 2023

A New York law firm that suffered a LockBit ransomware attack has agreed to pay a financial penalty of $200,000 to the New York Attorney General to resolve alleged violations of New York General Business Law and the Privacy and Security Rules of the Health Insurance Portability and Accountability Act (HIPAA).

HIPAA 111

HIPAA Ransomware Malpractice Health Insurance 111

HIPAA Journal

MARCH 29, 2022

The Department of Health and Human Services’ Office for Civil Rights (OCR) has announced its first financial penalties of 2022 to resolve alleged violations of the Health Insurance Portability and Accountability Act (HIPAA). Dental Practitioner Fined $30,000 for Noncompliance with the HIPAA Right of Access.

HIPAA 125

HIPAA Compliance Health Insurance 125

Healthcare IT Today

SEPTEMBER 28, 2023

The following is a guest article by Bill Young, Director of Healthcare & Life Sciences at SYSTRAN Keeping patient data confidential and secure remains a major healthcare challenge today, more than 25 years after the introduction of the 1996 Health Insurance Portability & Accountability Act or HIPAA.

HIPAA 128

HIPAA US Department of Health and Human Services Governance Health Insurance 128

HIPAA Journal

MAY 18, 2023

The Department of Health and Human Services’ Office for Civil Rights is the main enforcer of HIPAA compliance; however, state Attorneys General also play a role in enforcing compliance with the Rules of the Health Insurance Portability and Accountability Act (HIPAA). Community Health Systems/CHSPSC, Anthem Inc.,

HIPAA 102

HIPAA Compliance Ransomware Hospitals 102

HIPAA Journal

SEPTEMBER 12, 2023

Seymour, IN-based Schneck Medical Center has settled a lawsuit with the Indiana attorney general, Todd Rokita, over a 2021 ransomware attack and data breach that affected 89,707 Indiana residents.

HIPAA 96

HIPAA Ransomware Health Insurance Fraud 96

HIPAA Journal

MARCH 2, 2022

The Health Insurance Accountability and Portability Act (HIPAA) introduced multiple HIPAA rights. Unfortunately, the failure to comply with Privacy Rule HIPAA rights is one of the leading reasons for complaints to the HHS Office for Civil Rights. Rights under the Privacy Rule.

HIPAA 93

HIPAA Health Insurance Public Health Compliance 93

Compliancy Group

MAY 27, 2022

Almost as surely as summer follows spring, lawsuits follow breaches of protected health information. Here’s a roundup of recent HIPAA breach lawsuits and settlements. Lawsuits Increasing Following HIPAA Breaches – Facts and Figures. Let’s Simplify Compliance HIPAA and cybersecurity go hand-in-hand.

HIPAA 98

HIPAA Ransomware Hospitals Compliance 98

HIPAA Journal

FEBRUARY 28, 2023

Department of Health and Human Services (HHS) has restructured its Office for Civil Rights (OCR) and has created new divisions that will help improve the enforcement of HIPAA and civil rights laws and clear the current backlog of complaints and investigations. Approximately 80% of all reported data breaches are due to hacking.

HIPAA 104

HIPAA Health Insurance Compliance 104

HIPAA Journal

JUNE 28, 2022

The HHS’ Office for Civil Rights (OCR) Breach Portal includes breaches of the personally identifiable protected health information (PHI), such as unauthorized access and disclosures, exposures, and the loss and theft of PHI. OCR is the main enforcer of compliance with the Health Insurance Portability and Accountability Act (HIPAA).

HIPAA 96

HIPAA Compliance Health Insurance Governance 96

HIPAA Journal

MAY 2, 2022

6 data breaches have recently been reported by HIPAA-regulated entities that have collectively resulted in the exposure and potential theft of the protected health information of tens of thousands of individuals. Los Angeles County Department of Mental Health, California. La Casa de Salud, New York.

HIPAA 101

HIPAA Health Insurance Licensing Hospitals 101

HIPAA Journal

FEBRUARY 23, 2022

Logan Health Medical Center in Kalispell, MT, has recently started notifying certain patients that hackers gained access to a file server that housed patient information in “a highly sophisticated criminal attack.”. NHS Management Alerts Patients About May 2021 Cyberattack.

Electronic Medical Records 139

Electronic Medical Records HIPAA Health Insurance Medical Billing 139

Health Populi

JUNE 10, 2021

adult 18 and over in April 2021 to gather data for this annual report. 20% of people used online health services, and 20% intent to keep using them. In 2021, smartwatch adoption exceeded wearable activity fitness tracker market penetration, both around one-third of U.S. CTA conducted an online survey among 2,409 U.S.

HIPAA 173

HIPAA COVID-19 Health Insurance Health Outcomes 173

HIPAA Journal

JANUARY 2, 2023

The settlements pursued by the Department of Health and Human Services’ Office for Civil Rights (OCR) are for egregious violations of HIPAA Rules. Settlements are also pursued to highlight common HIPAA violations to raise awareness of the need to comply with specific aspects of HIPAA Rules.

HIPAA 110

HIPAA Compliance Hospitals Medicare 110

HIPAA Journal

MARCH 15, 2023

The United States Department of Justice has agreed to settle alleged False Claims Act violations with Jelly Bean Communications Design LLC and manager Jeremy Spinks related to the failure to protect HIPAA-covered data. FHKC is a state-created entity that offers health and dental insurance to children in Florida between the ages of 5 and 18.

Health Insurance 82

Health Insurance HIPAA Fraud Due Diligence 82

HIPAA Journal

DECEMBER 23, 2022

It has been another bad year for healthcare data breaches, with some of the biggest HIPAA breaches of 2022 resulting in the impermissible disclosure of well over a million records. The Biggest HIPAA Breaches of 2022. The 12 biggest HIPAA breaches of 2022 affected almost 22.66 million patients and health plan members.

HIPAA 92

HIPAA Ransomware Health Insurance Compliance 92

HIPAA Journal

MARCH 14, 2022

Capital Region Medical Center (CRMC) in Jefferson City, MO has recently confirmed patient information was accessed by unauthorized individuals in a December 2021 cyberattack that took its network and phone systems offline for several days. The attack was detected on December 17, 2021, when network systems were disrupted.

Electronic Medical Records 136

Electronic Medical Records Health Insurance HIPAA Licensing 136

HIPAA Journal

FEBRUARY 15, 2022

Chicago’s South Shore Hospital has started notifying 115,670 current and former patients about a December 2021 cyberattack on its network. Suspicious activity was identified on its network on December 10, 2021, and prompt action was taken to contain the incident.

Hospitals 125

Hospitals Health Insurance HIPAA Medicaid 125

HIPAA Journal

JUNE 22, 2022

A review of the affected files confirmed they contained information such as names, dates of birth, medical assessment and medication information, health insurance information, and Social Security numbers. The breach was detected on December 27, 2021, and it was determined on January 7, 2022, that patient data had been compromised.

HIPAA 90

HIPAA Health Insurance 90

HIPAA Journal

MARCH 11, 2022

Legal action is being taken against Logan Health and subsidiary, sister, and related entities of Logan Health over a data breach that occurred in 2021 and affected 213,543 Logan Health Medical Center patients. The lawsuit points out that data breach was one of several to have affected Logan Health.

HIPAA 120

HIPAA Health Insurance Medical Billing Fraud 120

HIPAA Journal

NOVEMBER 16, 2022

Unauthorized individuals have gained access to the email system of the Administrative Fund of the Detectives’ Endowment Association of the Police Department of the City of New York (NYCDEA) and potentially viewed or obtained the protected health information of 21,544 individuals.

HIPAA 96

HIPAA Licensing Health Insurance Fraud 96

HIPAA Journal

MARCH 10, 2022

Bako Diagnostics (BakoDx), a Georgia-based provider of laboratory services to healthcare providers, has announced it was the victim of a cyberattack that was discovered on December 28, 2021. The files exfiltrated from its systems included the protected health information of patients.

Ransomware 132

Ransomware Licensing Health Insurance HIPAA 132

HIPAA Journal

MARCH 4, 2022

Miami Lakes, FL-based Catholic Health Services has discovered the email accounts of three Catholic Hospice employees have been accessed by unauthorized individuals. Crossroads Health in Ohio has experienced a cyberattack that disrupted some of its IT systems. Bible Fellowship Church Homes, Inc.

Health Insurance 129

Health Insurance HIPAA Licensing 129

HIPAA Journal

MARCH 25, 2022

The forensic investigation revealed the email accounts were accessed by unauthorized individuals between April 7, 2021, and June 2, 2021. AHA provided notice about the attack on January 6, 2021. UMC was a victim of a REvil ransomware attack in June 2021 that resulted in the theft of the protected health information of 1.3

Health Insurance 118

Health Insurance Licensing Ransomware Fraud 118

HIPAA Journal

APRIL 7, 2022

SuperCare Health, a Downey, CA-based post-acute, in-home respiratory care provider serving the Western United States, has recently started notifying 318,379 patients that some of their protected health information has been exposed and potentially accessed by unauthorized individuals in a cyberattack that occurred in July 2021.

Licensing 134

Licensing HIPAA Health Insurance Hospitals 134

HIPAA Journal

APRIL 15, 2022

The incident involved the exposure and potential theft of the protected health information of 318,400 patients, including names, addresses, birth dates patient account numbers, medical record numbers, health insurance information, testing, diagnostic, treatment, and claims information.

Electronic Medical Records 124

Electronic Medical Records HIPAA Health Insurance Fraud 124

HIPAA Journal

MARCH 9, 2022

The Birmingham, AL-based multi-specialty clinic, Norwood Clinic, has recently started notifying 228,103 individuals that some of their protected health information was accessed in a cyberattack that was detected on October 22, 2021. The review was concluded on February 2, 2022, and affected customers were updated on February 14, 2022.

Electronic Medical Records 125

Electronic Medical Records Health Insurance Ransomware HIPAA 125

HIPAA Journal

NOVEMBER 8, 2022

Suspicious activity was detected within its network on May 12, 2021, with the forensic investigation confirming unauthorized individuals had access to its network for a month between April 20, 2021, and May 17, 2021. During that time, the attackers may have viewed or acquired sensitive patient data. The post U.S.

Licensing 71

Licensing Health Insurance HIPAA 71

HIPAA Journal

FEBRUARY 16, 2022

Morley Companies, a Saignaw, MI-based provider of business services, has recently announced it was the victim of a cyberattack that started on August 1, 2021, that prevented access to data on its information systems. The OCR data breach portal indicates the protected health information of 521,046 individuals was potentially compromised.

HIPAA 135

HIPAA Health Insurance 135

HIPAA Journal

FEBRUARY 16, 2022

Philadelphia FIGHT Community Health Centers has recently announced it was the victim of a cyberattack on November 30, 2021. The information potentially compromised in the attack included names, dates of birth, Social Security numbers, medical diagnoses, treatment information, and health insurance information.

Electronic Medical Records 111

Electronic Medical Records Health Insurance Licensing HIPAA 111

HIPAA Journal

JULY 11, 2022

Phoenixville Hospital Fires Employee for HIPAA Violation. According to the hospital operator, Tower Health, the unauthorized access was discovered during a routine audit of medical record access logs. Some of the accessed records included partial Social Security numbers and health insurance information.

Hospitals 106

Hospitals HIPAA Health Insurance Licensing 106

Bill of Health

JUNE 5, 2023

Liability Risks for Health Care Providers First, let’s consider the risks for health care providers who rely on AI tools like ChatGPT to treat patients. For these individuals, the possibility of medical malpractice claims and Health Insurance Portability and Accountability Act (HIPAA) violations looms large.

Malpractice 213

Malpractice FDA HIPAA Doctors 213

HIPAA Journal

MARCH 23, 2022

New Jersey Brain and Spine (NJBS) has recently announced it was the victim of a cyberattack on or around November 16, 2021, that encrypted data on its network. and Dialyze Direct appeared first on HIPAA Journal. Patients Affected by Breach at Printing and Mailing Vendor. Highmark Inc.,

HIPAA 129

HIPAA Licensing Health Insurance Governance 129