HIPAA Journal

FEBRUARY 22, 2023

On February 10, 2023, CentraState confirmed it had suffered a ransomware attack that disrupted its computer systems. The health system detected the attack on December 29, 2022, blocked the unauthorized access, and launched an investigation to determine the nature and scope of the breach.

Ransomware 107

Ransomware Fraud Health Insurance HIPAA 107

HIPAA Journal

JULY 4, 2024

SkinCure Oncology has notified 13,434 patients about an email attack that occurred in June 2023, and the Wisconsin Department of Health Services has announced a breach of the personal information of 19,150 Medicaid recipients. SkinCure Oncology believes files in those email accounts were viewed and potentially obtained in the attack.

Medicaid 115

Medicaid Medicaid Fraud Licensing 115

HIPAA Journal

SEPTEMBER 7, 2023

El Centro Del Barrio, dba CentroMed in San Antonio, TX, is facing at least two class action lawsuits over a June 2023 cyberattack in which hackers gained access to the personal and protected health information (PHI) of 350,000 patients. The affected individuals were notified by mail on August 11, 2023.

HIPAA 99

HIPAA Health Insurance Fraud 99

HIT Consultant

JULY 26, 2023

What You Should Know: HealthLock , a leading medical fraud and overbilling protection solution, today unveiled insightful findings from a recent attitudinal study exploring how adults in the United States feel about healthcare, from claims and billing to medical fraud and privacy.

Medical Billing 98

Medical Billing Fraud Health Insurance Doctors 98

HIPAA Journal

MARCH 30, 2023

On November 14, 2022, a hacker gained access to Rise’s network and accessed files containing sensitive patient data, including names, email addresses, phone numbers, provider information, diagnoses, expected delivery dates, and health insurance information.

Health Insurance 104

Health Insurance Fraud HIPAA 104

Compliancy Group

FEBRUARY 12, 2024

Fraud in healthcare has run rampant in recent years, as evident by two incidents in which healthcare organizations billed insurance companies for things patients never received. In the other fraud scheme, Medicare patients were billed an estimated $2 billion for urinary catheters they never received. Attorney Philip R.

Fraud 52

Fraud Medicare Medicare US Department of Health and Human Services 52

HIPAA Journal

MARCH 7, 2023

The cyberattack was detected on December 8, 2022, by which time the hackers had access to a huge amount of sensitive patient data, including full names, contact information, Social Security numbers, diagnoses, treatment information, medications, lab test results, radiology reports, and health insurance information.

Fraud 120

Fraud Health Insurance Doctors HIPAA 120

HIPAA Journal

MAY 10, 2023

Suspicious activity was detected within its computer systems on February 1, 2023, and third-party cybersecurity experts were engaged to conduct a forensic analysis of the incident to determine the nature and scope of the attack. The investigation concluded on March 3, 2023, that files within its network were accessed.

Hospitals 107

Hospitals Ransomware Health Insurance Fraud 107

HIPAA Journal

MARCH 1, 2023

The Albuquerque, NM-based health insurance provider, True Health New Mexico, has proposed a settlement to resolve claims related to a 2021 data breach that affected 62,983 members of its health plans. The deadline for objection to or exclusion from the settlement is April 14, 2023.

Fraud 108

Fraud Ransomware Health Insurance HIPAA 108

HIPAA Journal

DECEMBER 27, 2022

The breached information included names, addresses, Social Security numbers, birthdates, client identification numbers, medical diagnostic and treatment information, and health insurance information. Class members have until February 7, 2023, to object to or exclude themselves from the settlement.

Fraud 118

Fraud HIPAA Health Insurance 118

HIPAA Journal

JUNE 15, 2023

Johns Hopkins University and Johns Hopkins Health System are investigating a May 31, 2023, cyberattack and data breach that targeted a widely used software tool. The security breach was discovered on April 4, 2023, and unauthorized access was immediately blocked. Notifies 24,400 Individuals About Data Breach iSpace, Inc.,

Ransomware 107

Ransomware Health Insurance Fraud HIPAA 107

HIPAA Journal

JUNE 13, 2023

Harvard Pilgrim Health Care and its parent company, Point32Health, are facing multiple class action lawsuits after hackers gained access to the protected health information (PHI) of more than 2.5 million individuals in an April 2023 ransomware attack. Harvard Pilgrim Health Care Inc. Harvard Pilgrim Health Care, Inc.

Ransomware 102

Ransomware Fraud Health Insurance HIPAA 102

HIPAA Journal

MAY 17, 2023

In April 2023, the Money Message ransomware group announced it had breached the systems of PharMerica and its parent company, BrightSpring Health Services, and added both to its data leak site. That makes it the largest healthcare data breach to be reported by a single HIPAA-covered entity so far in 2023.

Ransomware 106

Ransomware HIPAA Fraud Health Insurance 106

HIPAA Journal

FEBRUARY 14, 2023

Hackers gained access to Umass Memorial Health’s email environment between June 24, 2020 and January 7, 2021, as a result of responses to phishing emails. Claims may also be submitted for extraordinary losses up to a maximum of $5,000, which can include documented, unreimbursed losses to fraud and identity theft.

Fraud 103

Fraud Licensing Health Insurance HIPAA 103

HIPAA Journal

JUNE 28, 2023

Individuals that have suffered identity theft, medical fraud, tax fraud, other forms of fraud, and other actual misuses of their personal information, can submit claims for documented, unreimbursed extraordinary losses that are reasonably traceable to the data breach of up to a maximum of $5,000.

Hospitals 87

Hospitals Fraud Licensing HIPAA 87

HIPAA Journal

APRIL 25, 2023

Santa Clara Family Health Plan Confirmed as Victim of Clop GoAnywhere Hack Santa Clara Family Health Plan has confirmed the 276,993-record data breach reported to the HHS’ Office for Civil Rights on March 30, 2023, was due to the hacking of Fortra’s GoAnywhere MFT solution by the Clop ransomware group.

Health Insurance 95

Health Insurance Public Health Ransomware Fraud 95

HIPAA Journal

MAY 25, 2023

In April 2023, Point32Health, the second-largest health insurer in Massachusetts and the parent company of Tufts Health Plan and Harvard Pilgrim Health Care, announced it suffered a ransomware attack that resulted in system outages, including the systems that serviced members, accounts, brokers, and providers.

Ransomware 91

Ransomware Health Insurance Fraud HIPAA 91

HIPAA Journal

FEBRUARY 15, 2023

The attack was detected and blocked by Electromed on June 16, 2021, and the forensic investigation confirmed that files were accessed – and potentially stolen – that included customers’ first and last names, mailing addresses, medical information, and health insurance information.

Ransomware 95

Ransomware Fraud Licensing Health Insurance 95

HIPAA Journal

FEBRUARY 16, 2023

The investigation confirmed hackers had access to, and potentially stole, the protected health information of patients such as names, Social Security numbers, driver’s license information, dates of birth, health insurance, medical treatment information, and financial account information.

HIPAA 103

HIPAA Fraud Licensing Health Insurance 103

HIPAA Journal

MAY 22, 2024

Superior Air-Ground Ambulance Service, a leading ambulance and EMS provider serving Illinois, Indiana, Michigan, Ohio, and Wisconsin, has confirmed that the protected health information of 858,238 patients was exposed or stolen in a cyberattack in May 2023.

Fraud 83

Fraud Licensing HIPAA Health Insurance 83

HIPAA Journal

MARCH 21, 2023

During that time they exfiltrated files that contained sensitive patient data, including names, contact information, Social Security number, Medicare/Medicaid IDs, health information, and health insurance information.

Fraud 113

Fraud Health Insurance Medicaid Medicaid 113

Bill of Health

NOVEMBER 17, 2024

by Rebekah Ninan A recent lawsuit in the Southern District of New York has alleged that the health insurance company Anthem Blue and Cross Blue Shield violated state laws and committed fraud by maintaining “ghost networks” of mental health providers.

Licensing 124

Licensing COVID-19 Fraud Health Care Access 124

HIPAA Journal

FEBRUARY 8, 2024

Azura Vascular Care, a Pennsylvania-based operator of 70 outpatient vascular centers and ambulatory surgery centers in 25 states and Puerto Rico, notified the HHS’ Office for Civil Rights last month about a cybersecurity incident involving the protected health information of 348,000 patients. The incident was detected on November 9, 2023.

Ransomware 90

Ransomware Electronic Medical Records Licensing Health Insurance 90

HIPAA Journal

JUNE 23, 2023

Intellihartx, a revenue cycle management company, said protected health information was compromised in the January 30, 2023 cyberattack, including names, contact information, insurance information, diagnoses, medications, dates of birth, and Social Security numbers. The lawsuit, Laren Perrone v.

HIPAA 97

HIPAA Ransomware Fraud Health Insurance 97

HIPAA Journal

MARCH 22, 2023

The lawsuit was filed on March 15, 2023, by the law firm Milberg Coleman Bryson Phillips Grossman PLLC on behalf of plaintiff, Samuel Lee. The plaintiff and class members now face an increased risk of identity theft and fraud as their private information is now in the hand of cybercriminals.

HIPAA 106

HIPAA Fraud Licensing Health Insurance 106

HIPAA Journal

JANUARY 25, 2023

Logan Health Medical Center – was filed against Logan Health in the Montana Eighth Judicial District Court shortly after notification letters were mailed. Logan Health chose to settle the lawsuit to avoid further legal costs and the uncertainty of trial. The post Logan Health Proposes $4.3

Medical Billing 93

Medical Billing Fraud HIPAA Health Insurance 93

HIPAA Journal

AUGUST 2, 2023

The Chattanooga Heart Institute (CHI) in Tennessee has recently announced that it identified a cyberattack on its network on April 17, 2023. Notification letters will be sent to the affected individuals in the coming weeks and credit monitoring, fraud consultation, and identity theft restoration services will be offered.

Licensing 80

Licensing Electronic Medical Records Ransomware Health Insurance 80

HIPAA Journal

JULY 4, 2023

Murfreesboro Medical Clinic & SurgiCenter (MMC) in Tennessee has recently confirmed that the protected health information of more than half a million patients was compromised in what it describes as “a series of attacks on our network and IT systems,” which were discovered on or around April 24, 2023.

Medicaid 81

Medicaid Medicaid Health Insurance Licensing 81

Medisys Compliance

JANUARY 30, 2023

HIPAA: The Health Insurance Portability and Accountability Act( HIPAA) is a federal law that establishes the national standards for protecting the privacy and security of individuals’ personal health information ( PHI). Let us discuss the top compliance issues in the medical billing industry, shall we?

Compliance 52

Compliance Medical Billing Medical Billing Outsourcing HIPAA 52

HIPAA Journal

AUGUST 30, 2023

Progress Software issued a security alert about the vulnerability on May 31, 2023, and released a patch the same day; however, the vulnerability had already been exploited in attacks by the Clop group, resulting in the theft of sensitive data. The breach was reported to the HHS’ Office for Civil Rights as affecting 531,732 individuals.

HIPAA 85

HIPAA Fraud Health Insurance 85

HIPAA Journal

SEPTEMBER 12, 2023

Schneck Medical Center has agreed to pay a penalty of $250,000 to resolve alleged violations of the Health Insurance Portability and Accountability Act (HIPAA) and state laws and will implement additional safeguards to prevent further data breaches.

HIPAA 96

HIPAA Ransomware Health Insurance Fraud 96

HIPAA Journal

SEPTEMBER 13, 2023

A class action lawsuit has been filed against the student healthcare insurer UnitedHealthcare Services, which does business as UnitedHealthcare Student Resources, over its MOVEit Transfer data breach in May 2023.

Ransomware 71

Ransomware Fraud Health Insurance HIPAA 71

HIPAA Journal

APRIL 5, 2024

In 2022, the plaintiffs moved to certify three classes, one for each cause of action; however, in March 2023, District Court Judge Christopher Cooper denied the plaintiffs’ motion to certify two consumer classes and one contract class without prejudice, allowing the plaintiffs to file a renewed and modified motion which they did.

Fraud 76

Fraud HIPAA Health Insurance Compliance 76

HIPAA Journal

JANUARY 31, 2023

The lawsuit alleged the plaintiff and class members now face a high risk of identity theft and fraud as a result of the data breach and have incurred out-of-pocket expenses and lost time securing their accounts and protecting against the misuse of their personal and protected health information.

Ransomware 63

Ransomware Fraud Health Insurance HIPAA 63

HIT Consultant

SEPTEMBER 4, 2024

Due to the high volume of valuable data stored on their networks, the healthcare industry is a ripe target for cyber criminals, with 725 data breaches reported to the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) in 2023.

Ransomware 111

Ransomware HIPAA Compliance Doctors 111

Kaiser Health News

JANUARY 19, 2022

Although the practice does not appear widespread, it has prompted the Department of Health and Human Services to seek changes to some oversight rules affecting brokers. They would start in 2023. But they have only 60 days after discovering the fraudulent enrollment to do so.

ACA 81

ACA Health Insurance Licensing Governance 81

HIPAA Journal

MAY 1, 2023

The document review took until March 21, 2023, and notification letters were sent on April 20, 2023. The information exposed and potentially stolen in the attack included names, dates of birth, billing and claims data, treatment details, medical record numbers, prescriptions, health insurance information, and Social Security numbers.

Health Insurance 58

Health Insurance Fraud HIPAA Hospitals 58