HIPAA Journal

SEPTEMBER 7, 2023

El Centro Del Barrio, dba CentroMed in San Antonio, TX, is facing at least two class action lawsuits over a June 2023 cyberattack in which hackers gained access to the personal and protected health information (PHI) of 350,000 patients. The affected individuals were notified by mail on August 11, 2023.

HIPAA 100

HIPAA Health Insurance Fraud 100

HIPAA Journal

JULY 4, 2024

SkinCure Oncology has notified 13,434 patients about an email attack that occurred in June 2023, and the Wisconsin Department of Health Services has announced a breach of the personal information of 19,150 Medicaid recipients. SkinCure Oncology believes files in those email accounts were viewed and potentially obtained in the attack.

Medicaid 116

Medicaid Medicaid Fraud Licensing 116

HIT Consultant

JULY 26, 2023

What You Should Know: HealthLock , a leading medical fraud and overbilling protection solution, today unveiled insightful findings from a recent attitudinal study exploring how adults in the United States feel about healthcare, from claims and billing to medical fraud and privacy.

Medical Billing 98

Medical Billing Fraud Health Insurance Doctors 98

Medisys Compliance

JANUARY 30, 2023

HIPAA: The Health Insurance Portability and Accountability Act( HIPAA) is a federal law that establishes the national standards for protecting the privacy and security of individuals’ personal health information ( PHI). Let us discuss the top compliance issues in the medical billing industry, shall we?

Compliance 52

Compliance Medical Billing Medical Billing Outsourcing HIPAA 52

HIPAA Journal

FEBRUARY 22, 2023

On February 10, 2023, CentraState confirmed it had suffered a ransomware attack that disrupted its computer systems. The health system detected the attack on December 29, 2022, blocked the unauthorized access, and launched an investigation to determine the nature and scope of the breach.

Ransomware 108

Ransomware Fraud Health Insurance HIPAA 108

HIPAA Journal

MAY 22, 2024

Superior Air-Ground Ambulance Service, a leading ambulance and EMS provider serving Illinois, Indiana, Michigan, Ohio, and Wisconsin, has confirmed that the protected health information of 858,238 patients was exposed or stolen in a cyberattack in May 2023.

Fraud 83

Fraud Licensing HIPAA Health Insurance 83

HIPAA Journal

MARCH 30, 2023

On November 14, 2022, a hacker gained access to Rise’s network and accessed files containing sensitive patient data, including names, email addresses, phone numbers, provider information, diagnoses, expected delivery dates, and health insurance information.

Health Insurance 105

Health Insurance Fraud HIPAA 105

Bill of Health

NOVEMBER 17, 2024

by Rebekah Ninan A recent lawsuit in the Southern District of New York has alleged that the health insurance company Anthem Blue and Cross Blue Shield violated state laws and committed fraud by maintaining “ghost networks” of mental health providers.

Licensing 114

Licensing COVID-19 Fraud Health Care Access 114

HIPAA Journal

JUNE 28, 2023

Individuals that have suffered identity theft, medical fraud, tax fraud, other forms of fraud, and other actual misuses of their personal information, can submit claims for documented, unreimbursed extraordinary losses that are reasonably traceable to the data breach of up to a maximum of $5,000.

Hospitals 89

Hospitals Fraud Licensing HIPAA 89

HIPAA Journal

JUNE 13, 2023

Harvard Pilgrim Health Care and its parent company, Point32Health, are facing multiple class action lawsuits after hackers gained access to the protected health information (PHI) of more than 2.5 million individuals in an April 2023 ransomware attack. Harvard Pilgrim Health Care Inc. Harvard Pilgrim Health Care, Inc.

Ransomware 103

Ransomware Fraud Health Insurance HIPAA 103

HIPAA Journal

MAY 10, 2023

Suspicious activity was detected within its computer systems on February 1, 2023, and third-party cybersecurity experts were engaged to conduct a forensic analysis of the incident to determine the nature and scope of the attack. The investigation concluded on March 3, 2023, that files within its network were accessed.

Hospitals 108

Hospitals Ransomware Health Insurance Fraud 108

HIPAA Journal

JUNE 15, 2023

Johns Hopkins University and Johns Hopkins Health System are investigating a May 31, 2023, cyberattack and data breach that targeted a widely used software tool. The security breach was discovered on April 4, 2023, and unauthorized access was immediately blocked. Notifies 24,400 Individuals About Data Breach iSpace, Inc.,

Ransomware 108

Ransomware Health Insurance Fraud HIPAA 108

HIPAA Journal

MAY 25, 2023

In April 2023, Point32Health, the second-largest health insurer in Massachusetts and the parent company of Tufts Health Plan and Harvard Pilgrim Health Care, announced it suffered a ransomware attack that resulted in system outages, including the systems that serviced members, accounts, brokers, and providers.

Ransomware 92

Ransomware Health Insurance Fraud HIPAA 92

HIPAA Journal

MAY 17, 2023

In April 2023, the Money Message ransomware group announced it had breached the systems of PharMerica and its parent company, BrightSpring Health Services, and added both to its data leak site. That makes it the largest healthcare data breach to be reported by a single HIPAA-covered entity so far in 2023.

Ransomware 107

Ransomware HIPAA Fraud Health Insurance 107

HIPAA Journal

MARCH 1, 2023

The Albuquerque, NM-based health insurance provider, True Health New Mexico, has proposed a settlement to resolve claims related to a 2021 data breach that affected 62,983 members of its health plans. The deadline for objection to or exclusion from the settlement is April 14, 2023.

Fraud 110

Fraud Ransomware Health Insurance HIPAA 110

HIPAA Journal

APRIL 25, 2023

Santa Clara Family Health Plan Confirmed as Victim of Clop GoAnywhere Hack Santa Clara Family Health Plan has confirmed the 276,993-record data breach reported to the HHS’ Office for Civil Rights on March 30, 2023, was due to the hacking of Fortra’s GoAnywhere MFT solution by the Clop ransomware group.

Health Insurance 96

Health Insurance Public Health Ransomware Fraud 96

HIPAA Journal

FEBRUARY 14, 2023

Hackers gained access to Umass Memorial Health’s email environment between June 24, 2020 and January 7, 2021, as a result of responses to phishing emails. Claims may also be submitted for extraordinary losses up to a maximum of $5,000, which can include documented, unreimbursed losses to fraud and identity theft.

Fraud 104

Fraud Licensing Health Insurance HIPAA 104

HIPAA Journal

FEBRUARY 8, 2024

Azura Vascular Care, a Pennsylvania-based operator of 70 outpatient vascular centers and ambulatory surgery centers in 25 states and Puerto Rico, notified the HHS’ Office for Civil Rights last month about a cybersecurity incident involving the protected health information of 348,000 patients. The incident was detected on November 9, 2023.

Ransomware 91

Ransomware Electronic Medical Records Licensing Health Insurance 91

Innovaare Compliance

MARCH 24, 2024

The Importance of Payment Integrity Payment integrity is crucial for health plans to control costs, reduce fraud, waste, and abuse (FWA), and ensure the accuracy of healthcare payments. billion in healthcare fraud judgments and settlements. billion in healthcare fraud judgments and settlements.

Fraud 52

Fraud Health Insurance Medicaid Medicaid 52

Bill of Health

OCTOBER 30, 2023

By Bobby Stroup 2023 is the year of the emoji lawsuit. In another legal case, a “moon” emoji was found to be possible evidence of securities fraud. In health care, complexity is everywhere. Health insurance is confusing. Notes about our health can be difficult to understand.

Doctors 291

Doctors Hospitals Fraud Health Insurance 291

HIPAA Journal

MARCH 7, 2023

The cyberattack was detected on December 8, 2022, by which time the hackers had access to a huge amount of sensitive patient data, including full names, contact information, Social Security numbers, diagnoses, treatment information, medications, lab test results, radiology reports, and health insurance information.

Fraud 121

Fraud Health Insurance HIPAA Doctors 121

HIPAA Journal

FEBRUARY 15, 2023

The attack was detected and blocked by Electromed on June 16, 2021, and the forensic investigation confirmed that files were accessed – and potentially stolen – that included customers’ first and last names, mailing addresses, medical information, and health insurance information.

Ransomware 97

Ransomware Fraud Licensing Health Insurance 97

HIPAA Journal

AUGUST 2, 2023

The Chattanooga Heart Institute (CHI) in Tennessee has recently announced that it identified a cyberattack on its network on April 17, 2023. Notification letters will be sent to the affected individuals in the coming weeks and credit monitoring, fraud consultation, and identity theft restoration services will be offered.

Licensing 82

Licensing Electronic Medical Records Ransomware Health Insurance 82

HIPAA Journal

JULY 4, 2023

Murfreesboro Medical Clinic & SurgiCenter (MMC) in Tennessee has recently confirmed that the protected health information of more than half a million patients was compromised in what it describes as “a series of attacks on our network and IT systems,” which were discovered on or around April 24, 2023.

Medicaid 83

Medicaid Medicaid Health Insurance Licensing 83

HIPAA Journal

DECEMBER 27, 2022

The breached information included names, addresses, Social Security numbers, birthdates, client identification numbers, medical diagnostic and treatment information, and health insurance information. Class members have until February 7, 2023, to object to or exclude themselves from the settlement.

Fraud 119

Fraud HIPAA Health Insurance 119

HIPAA Journal

SEPTEMBER 13, 2023

A class action lawsuit has been filed against the student healthcare insurer UnitedHealthcare Services, which does business as UnitedHealthcare Student Resources, over its MOVEit Transfer data breach in May 2023.

Ransomware 71

Ransomware Fraud Health Insurance HIPAA 71

HIPAA Journal

MAY 1, 2023

The document review took until March 21, 2023, and notification letters were sent on April 20, 2023. The information exposed and potentially stolen in the attack included names, dates of birth, billing and claims data, treatment details, medical record numbers, prescriptions, health insurance information, and Social Security numbers.

Health Insurance 58

Health Insurance Fraud HIPAA Hospitals 58

HIPAA Journal

FEBRUARY 16, 2023

The investigation confirmed hackers had access to, and potentially stole, the protected health information of patients such as names, Social Security numbers, driver’s license information, dates of birth, health insurance, medical treatment information, and financial account information.

HIPAA 104

HIPAA Fraud Licensing Health Insurance 104

HIT Consultant

JANUARY 3, 2023

But they have also expanded the attack surface at these organizations and increased the level of risk and vulnerabilities that could result in direct loss of proprietary information, direct financial damage including theft and fraud, and potential loss of life (in addition to regulatory fines and brand damage) the healthcare sector faces.

Compliance 52

Compliance Ransomware Fraud Regulatory Compliance 52

HIPAA Journal

JUNE 23, 2023

Intellihartx, a revenue cycle management company, said protected health information was compromised in the January 30, 2023 cyberattack, including names, contact information, insurance information, diagnoses, medications, dates of birth, and Social Security numbers. The lawsuit, Laren Perrone v.

HIPAA 98

HIPAA Ransomware Fraud Health Insurance 98

HIPAA Journal

JANUARY 31, 2023

The lawsuit alleged the plaintiff and class members now face a high risk of identity theft and fraud as a result of the data breach and have incurred out-of-pocket expenses and lost time securing their accounts and protecting against the misuse of their personal and protected health information.

Ransomware 63

Ransomware Fraud Health Insurance HIPAA 63

HIPAA Journal

AUGUST 30, 2023

Progress Software issued a security alert about the vulnerability on May 31, 2023, and released a patch the same day; however, the vulnerability had already been exploited in attacks by the Clop group, resulting in the theft of sensitive data. The breach was reported to the HHS’ Office for Civil Rights as affecting 531,732 individuals.

HIPAA 87

HIPAA Fraud Health Insurance 87

HIPAA Journal

MARCH 21, 2023

During that time they exfiltrated files that contained sensitive patient data, including names, contact information, Social Security number, Medicare/Medicaid IDs, health information, and health insurance information.

Fraud 114

Fraud Health Insurance Medicaid Medicaid 114

HIPAA Journal

APRIL 5, 2024

In 2022, the plaintiffs moved to certify three classes, one for each cause of action; however, in March 2023, District Court Judge Christopher Cooper denied the plaintiffs’ motion to certify two consumer classes and one contract class without prejudice, allowing the plaintiffs to file a renewed and modified motion which they did.

Fraud 77

Fraud HIPAA Health Insurance Compliance 77

HIPAA Journal

JANUARY 25, 2023

Logan Health Medical Center – was filed against Logan Health in the Montana Eighth Judicial District Court shortly after notification letters were mailed. Logan Health chose to settle the lawsuit to avoid further legal costs and the uncertainty of trial. The post Logan Health Proposes $4.3

Medical Billing 95

Medical Billing Fraud HIPAA Health Insurance 95

HIPAA Journal

MARCH 22, 2023

The lawsuit was filed on March 15, 2023, by the law firm Milberg Coleman Bryson Phillips Grossman PLLC on behalf of plaintiff, Samuel Lee. The plaintiff and class members now face an increased risk of identity theft and fraud as their private information is now in the hand of cybercriminals.

HIPAA 107

HIPAA Fraud Licensing Health Insurance 107

HIPAA Journal

SEPTEMBER 12, 2023

Schneck Medical Center has agreed to pay a penalty of $250,000 to resolve alleged violations of the Health Insurance Portability and Accountability Act (HIPAA) and state laws and will implement additional safeguards to prevent further data breaches.

HIPAA 98

HIPAA Ransomware Health Insurance Fraud 98