HIPAA Journal

AUGUST 5, 2022

In a substitute breach notification, First Choice explained that unusual activity was detected within its technological environment on March 27, 2022. Affected individuals were notified about the breach by mail on August 1, 2022, and have been offered complimentary identity theft protection services through IDX.

Electronic Medical Records 116

Electronic Medical Records Health Insurance Fraud HIPAA 116

HIPAA Journal

JUNE 15, 2022

The South Carolina-based health insurance company, Choice Health, now part of Alight Solutions, has recently announced that the protected health information of some of its members has been obtained by an unauthorized individual. That issue meant the database could be accessed over the internet without authorization.

Ransomware 144

Ransomware Health Insurance Fraud HIPAA 144

HIPAA Journal

SEPTEMBER 9, 2022

That process concluded on June 24, 2022. Those emails contained patient information such as names, dates of birth, Social Security numbers, medical information, health insurance information, driver’s license numbers, and state ID numbers. The information exposed varied from patient to patient.

Licensing 119

Licensing Health Insurance Fraud HIPAA 119

HIPAA Journal

NOVEMBER 16, 2022

According to the breach report filed with the Maine Attorney General, it took until October 3, 2022, to confirm that an unauthorized third party had accessed the email system, which included sensitive information of its members. Notification letters were sent to affected individuals on October 31, 2022.

HIPAA 111

HIPAA Licensing Health Insurance Fraud 111

HIPAA Journal

MARCH 7, 2023

The cyberattack in question occurred on December 1, 2022. Hackers gained access to the medical groups’ IT systems, preventing access to certain servers on December 2, 2022. The attempted fraudulent activity occurred between December 2022 and February 2023, before being informed by the defendants about the data breach.

Fraud 122

Fraud Health Insurance Doctors HIPAA 122

HIPAA Journal

MARCH 30, 2023

A lawsuit has been filed against the digital marketing agency, Rise Interactive Media & Analytics, over a cyberattack in which the protected health information of approximately 54,500 patients of Edgepark Medical Supplies was compromised.

Health Insurance 107

Health Insurance Fraud HIPAA 107

HIPAA Journal

APRIL 15, 2022

A lawsuit has been filed against the in-home respiratory care provider, SuperCare Health, over a cyberattack and data breach that was reported to the Department of Health and Human Services on March 28, 2022. In 2021, the law firm was involved in 23 incidents, and 58 lawsuits were filed in response to those breaches.

Electronic Medical Records 124

Electronic Medical Records HIPAA Health Insurance Fraud 124

HIPAA Journal

MAY 25, 2022

Social Action Community Health System (SAC Health) has recently notified 149,940 patients that documents containing their protected health information were stolen in a break-in at an off-site storage location where patient records were stored. Notification letters were sent to those individuals on May 3, 2022.

Ransomware 137

Ransomware Fraud HIPAA Licensing 137

HIPAA Journal

OCTOBER 18, 2022

According to the breach report sent to the HHS on October 3, 2022, unauthorized individuals gained access to its email environment which contained patient information. Suspicious email account activity was detected on June 1, 2022, and immediate action was taken to secure the account. Eventus WholeHealth Announces Email Account Breach.

Fraud 117

Fraud HIPAA Health Insurance Governance 117

HIPAA Journal

MARCH 24, 2022

Notification letters started to be sent to affected individuals on March 15, 2022. Notification letters started to be sent to affected individuals on March 15, 2022. Chelan Douglas Health District said it is unaware of any cases of identity fraud or other misuse of patient data.

Ransomware 136

Ransomware Fraud Hospitals HIPAA 136

HIPAA Journal

MARCH 21, 2023

ILS Identified the breach in July 2022 and determined unauthorized individuals had access to its network between June 30, 2022, and July 5, 2022. Affected individuals were offered complimentary credit monitoring services and security measures have been enhanced to prevent further data breaches. The lawsuit was filed by Joseph G.

Fraud 117

Fraud Health Insurance Medicaid Medicaid 117

HIPAA Journal

NOVEMBER 23, 2022

The attack occurred between January 26 and January 28, 2022, and while the attack was detected by the firm’s endpoint security solution shortly after the ransomware was executed, it was not possible to prevent the encryption of certain files on its network.

Ransomware 122

Ransomware Fraud Licensing HIPAA 122

HIPAA Journal

JULY 20, 2022

While data theft could not be determined, the affected email accounts contained the protected health information of patients of 19 of its hospitals, including names, birth dates, health insurance information, Social Security numbers, driver’s license, and healthcare data. BJC HealthCare has committed $2.7

Fraud 128

Fraud Licensing HIPAA Health Insurance 128

HIPAA Journal

MARCH 11, 2022

District Court for the District of Montana Great Falls Division by law firm Heenan & Cook on behalf of plaintiff Allison Smeltz and all similarly affected individuals over the alleged failure of the health system to protect the plaintiff’s and class members’ sensitive personal information.

HIPAA 135

HIPAA Health Insurance Medical Billing Fraud 135

HIPAA Journal

MARCH 25, 2022

Ultimate Care said no reports have been received that indicate there has been any misuse of patient information; however, as a precaution against identity theft and fraud, individuals whose Social Security numbers were impacted have been offered complimentary one-year memberships with a credit monitoring service.

Health Insurance 120

Health Insurance Licensing Ransomware Fraud 120

HIPAA Journal

DECEMBER 19, 2022

Avem Health Partners, an Oklahoma City-based provider of administrative and technology services to healthcare organizations, has recently started notifying its healthcare clients about a data breach that occurred at one of its vendors, 365 Data Centers. Department of Labor (DOL) on August 24, 2022. The DOL and the U.S.

Fraud 107

Fraud Licensing HIPAA Health Insurance 107

HIPAA Journal

AUGUST 4, 2022

The forensic investigation confirmed that names, addresses, diagnoses, treatment information, patient account numbers, billing information, dentists’ names, payment card information, and health insurance information had potentially been compromised. The deadline for opting out of the settlement – July 26, 2022 – has now passed.

Fraud 128

Fraud HIPAA Health Insurance 128

HIPAA Journal

OCTOBER 21, 2022

A pharmaceutical sales rep has pleaded guilty to conspiring to commit healthcare fraud and wrongfully disclosing and obtaining patients’ protected health information in an elaborate healthcare fraud scheme involving criminal HIPAA violations. Ritson identified the patients through the medical practice of Dr. Frank Alario.

Fraud 60

Fraud HIPAA FDA Health Insurance 60

HIPAA Journal

MARCH 11, 2025

An investigation was launched, and it was confirmed that RIPTAs previous health insurance provider, UnitedHealthcare of New England, had provided RIPTA with files containing the data of non-RIPTA employees, and that data was compromised in the attack.

Ransomware 51

Ransomware Fraud HIPAA Health Insurance 51

Kaiser Health News

APRIL 16, 2024

The push began after March 2022, when a special enrollment period for low-income people became available, opening up a year-round opportunity to enroll in an ACA plan. “Unfortunately, there’s so much fraud that legitimate agents who are really trying to help people are also being pushed out.”

ACA 141

ACA Health Insurance Governance Medical Billing 141

HIPAA Journal

DECEMBER 20, 2022

Work Health Solutions, a San Jose, CA-based occupational health services provider, has confirmed that the protected health information of 13,157 individuals has been exposed and potentially obtained by unauthorized individuals who had access to an employee email account between February 16, 2-022 and March 24, 2022.

Health Insurance 110

Health Insurance Licensing Hospitals Fraud 110

HIPAA Journal

APRIL 1, 2022

For the second time this year, the health district has announced patient data has potentially been compromised after an employee responded to a phishing email. Last week, SRHD confirmed that the email account contained the protected health information of 1,260 individuals.

Fraud 141

Fraud HIPAA Licensing Health Insurance 141

Healthcare IT Today

NOVEMBER 22, 2024

According to a report from the Office of the Director of National Intelligence, ransomware attacks on healthcare organizations doubled between 2022 and 2023 , making the healthcare sector one of the fastest-growing targets for cybercriminals.

Ransomware 72

Ransomware Hospitals COVID-19 Compliance 72

HIPAA Journal

APRIL 25, 2023

On February 13, 2023, NationsBenefits confirmed that the data compromised in the attack included protected health information such as name, address, phone number, gender, date of birth, health insurance number, medical ID number, Social Security number, date(s) of service, medical device or product purchased, and provider/caregiver name.

Health Insurance 106

Health Insurance Public Health Ransomware Fraud 106

HIPAA Journal

MAY 10, 2023

McPherson Hospital – Ransomware Attack McPherson Hospital in Kansas has recently issued notification letters to 19,020 patients to alert them about a July 2022 ransomware attack. Notification letters were sent in early May, almost 10 months after the attack. The unauthorized access was traced to a former employee.

Hospitals 111

Hospitals Ransomware Health Insurance Fraud 111

HIPAA Journal

AUGUST 2, 2023

Notification letters will be sent to the affected individuals in the coming weeks and credit monitoring, fraud consultation, and identity theft restoration services will be offered. A third-party data review company was provided with the files on December 22, 2022, and provided the results of the analysis to SHS on May 16, 2023.

Licensing 96

Licensing Electronic Medical Records Ransomware Health Insurance 96

HIPAA Journal

FEBRUARY 16, 2023

The investigation confirmed hackers had access to, and potentially stole, the protected health information of patients such as names, Social Security numbers, driver’s license information, dates of birth, health insurance, medical treatment information, and financial account information. Advent Health Partners, Inc.

HIPAA 107

HIPAA Fraud Licensing Health Insurance 107

The Health Law Firm Blog

FEBRUARY 23, 2024

Board Certified by The Florida Bar in Health Law On August 24, 2022, managed healthcare company, Centene Corporation, agreed to pay $19 million to the State of Washington to settle fraud allegations. Centene owns and operates Sunshine State Health Plan, d/b/a Sunshine Health, in Florida. By George F.

Fraud 52

Fraud Medicaid Medicaid Overpayment 52

The Health Law Firm Blog

NOVEMBER 29, 2022

Board Certified by The Florida Bar in Health Law On August 24, 2022, managed healthcare company, Centene Corporation, agreed to pay $19 million to the State of Washington to settle fraud allegations. Centene owns and operates Sunshine State Health Plan, d/b/a Sunshine Health, in Florida. By George F.

Fraud 52

Fraud Medicaid Medicaid Overpayment 52

The Health Law Firm Blog

OCTOBER 14, 2022

Board Certified by The Florida Bar in Health Law On August 24, 2022, managed healthcare company, Centene Corporation, agreed to pay $19 million to the State of Washington to settle fraud allegations. Centene owns and operates Sunshine State Health Plan, d/b/a Sunshine Health, in Florida. By George F.

Fraud 52

Fraud Medicaid Medicaid Overpayment 52

HIPAA Journal

MARCH 1, 2023

The Albuquerque, NM-based health insurance provider, True Health New Mexico, has proposed a settlement to resolve claims related to a 2021 data breach that affected 62,983 members of its health plans. True Health New Mexico Inc. , all of which were filed in the 2nd District Court of the State of New Mexico.

Fraud 114

Fraud Ransomware Health Insurance HIPAA 114

HIPAA Journal

OCTOBER 6, 2022

Mon Health said it detected the breach on December 30, 2021, with the forensic investigation determining hackers accessed its network between December 9 and December 19. The lawsuit, which names Monongalia Health Systems Inc. and affiliated hospitals, Monongalia County General Hospital Co., Stonewall Jackson Memorial Hospital Co.,

HIPAA 118

HIPAA Fraud Hospitals Health Insurance 118

The Health Law Firm Blog

MARCH 14, 2024

Board Certified by The Florida Bar in Health Law On August 24, 2022, managed healthcare company, Centene Corporation, agreed to pay $19 million to the State of Washington to settle fraud allegations. Centene owns and operates Sunshine State Health Plan, d/b/a Sunshine Health, in Florida. By George F.

Fraud 52

Fraud Medicaid Medicaid Overpayment 52

The Health Law Firm Blog

FEBRUARY 1, 2024

Board Certified by The Florida Bar in Health Law On August 24, 2022, managed healthcare company, Centene Corporation, agreed to pay $19 million to the State of Washington to settle fraud allegations. Centene owns and operates Sunshine State Health Plan, d/b/a Sunshine Health, in Florida. By George F.

Fraud 52

Fraud Medicaid Medicaid Overpayment 52

The Health Law Firm Blog

DECEMBER 19, 2022

Board Certified by The Florida Bar in Health Law On August 24, 2022, managed healthcare company, Centene Corporation, agreed to pay $19 million to the State of Washington to settle fraud allegations. Centene owns and operates Sunshine State Health Plan, d/b/a Sunshine Health, in Florida. By George F.

Fraud 52

Fraud Medicaid Medicaid Overpayment 52

The Health Law Firm Blog

NOVEMBER 7, 2022

Board Certified by The Florida Bar in Health Law On August 24, 2022, managed healthcare company, Centene Corporation, agreed to pay $19 million to the State of Washington to settle fraud allegations. Centene owns and operates Sunshine State Health Plan, d/b/a Sunshine Health, in Florida. By George F.

Fraud 52

Fraud Medicaid Medicaid Overpayment 52

HIPAA Journal

SEPTEMBER 12, 2023

Schneck Medical Center has agreed to pay a penalty of $250,000 to resolve alleged violations of the Health Insurance Portability and Accountability Act (HIPAA) and state laws and will implement additional safeguards to prevent further data breaches.

HIPAA 103

HIPAA Ransomware Health Insurance Fraud 103