Healthcare IT Today

JANUARY 2, 2023

As we head into 2023, we wanted to kick off the new year with a series of 2023 Health IT predictions. We are going to see an increased demand for privacy-preserving technology in 2023, and therefore more investment in the space. during 2023. Check out our community’s healthcare Security and Risk predictions.

Ransomware 140

Ransomware Fraud Compliance Telemedicine 140

HIPAA Journal

JUNE 21, 2023

Onix Group, a Pennsylvania-based real estate development firm and provider of business management and consulting services, is being sued for failing to prevent a ransomware attack in which the hackers stole the protected health information of 320,000 individuals. The ransomware attack was detected by Onix Group on March 27.

Ransomware 104

Ransomware Fraud HIPAA 104

HIPAA Journal

MAY 25, 2023

In April 2023, Point32Health, the second-largest health insurer in Massachusetts and the parent company of Tufts Health Plan and Harvard Pilgrim Health Care, announced it suffered a ransomware attack that resulted in system outages, including the systems that serviced members, accounts, brokers, and providers.

Ransomware 92

Ransomware Health Insurance Fraud HIPAA 92

HIPAA Journal

JANUARY 31, 2023

San Andreas Regional Center – was filed in the Superior Court of California in response to the breach alleging the healthcare provider was negligent for failing to implement reasonable cybersecurity measures to protect against ransomware attacks, despite being aware of the high risk of attacks on the healthcare sector.

Ransomware 63

Ransomware Fraud Health Insurance HIPAA 63

HIPAA Journal

JUNE 5, 2023

Multiple class action lawsuits have been filed against the city of Oakland in California over a ransomware attack and data breach that involved the theft of the personal and protected health information of 13,000 current and former employees. The ransomware attack is understood to have started with phishing emails.

Ransomware 58

Ransomware Fraud HIPAA 58

HIPAA Journal

JUNE 8, 2023

a provider of call center and customer experience software technology to large enterprises, has recently confirmed that it fell victim to a ransomware attack on a limited portion of its network. The post Alvaria Confirms November 2022 Hive Ransomware Attack appeared first on HIPAA Journal. (formerly Aspect Software, Inc.),

Ransomware 52

Ransomware Fraud HIPAA Health Insurance 52

HIPAA Journal

NOVEMBER 21, 2022

The Wisconsin-based dermatology practice, Forefront Dermatology, has agreed to settle a class action lawsuit filed on behalf of patients whose protected health information (PHI) was compromised in a ransomware attack in late May 2021. The final approval hearing has been scheduled for March 1, 2023.

Ransomware 68

Ransomware Fraud HIPAA Licensing 68

HIPAA Journal

MARCH 30, 2023

Ransomware and phishing continue to be the biggest cybersecurity concerns for healthcare organizations according to the February 2023 Current and Emerging Healthcare Cyber Threat Landscape report from Health-ISAC. Ransomware was the biggest concern for 2022 and 2023 with phishing and spear phishing in second.

Ransomware 107

Ransomware Fraud Governance Medical Billing 107

HIPAA Journal

MARCH 3, 2023

The attack was conducted by the Sodinokibi ransomware group, which published some of the stolen data on its data leak site. Claims will also be accepted up to a maximum of $3,500 per claimant to cover documented, extraordinary losses that have not already been reimbursed, such as losses to fraud and identity theft.

Ransomware 93

Ransomware Fraud HIPAA 93

HIPAA Journal

FEBRUARY 15, 2023

The medical device manufacturer Electromed has proposed a $850,000 settlement to resolve claims related to a June 2021 ransomware attack and data breach involving the protected health information of 47,200 individuals. The deadline for objection to and exclusion from the settlement is March 2, 2023. A lawsuit – Lutz, et al.

Ransomware 97

Ransomware Fraud Licensing Health Insurance 97

HIPAA Journal

MAY 17, 2023

In April 2023, the Money Message ransomware group announced it had breached the systems of PharMerica and its parent company, BrightSpring Health Services, and added both to its data leak site. That makes it the largest healthcare data breach to be reported by a single HIPAA-covered entity so far in 2023.

Ransomware 107

Ransomware HIPAA Fraud Health Insurance 107

HIPAA Journal

MAY 18, 2023

The breach was detected by NextGen on March 30, 2023, and the forensic investigation confirmed hackers had access to its network between March 29, 2023, and April 14, 2023. This was the second data breach to be reported by NextGen this year, with the earlier incident being a BlackCat ransomware attack.

Ransomware 124

Ransomware Fraud HIPAA 124

HIPAA Journal

JUNE 15, 2023

Johns Hopkins University and Johns Hopkins Health System are investigating a May 31, 2023, cyberattack and data breach that targeted a widely used software tool. The security breach was discovered on April 4, 2023, and unauthorized access was immediately blocked. At this stage, it is unclear how many individuals have been affected.

Ransomware 108

Ransomware Health Insurance Fraud HIPAA 108

HIPAA Journal

FEBRUARY 8, 2024

The incident was detected on November 9, 2023. Cybersecurity experts were engaged to assist with the investigation, which confirmed that unauthorized individuals accessed certain systems on or before September 27, 2023, and encrypted certain files. It is not clear from the notification letters when the intrusion occurred.

Ransomware 91

Ransomware Electronic Medical Records Licensing Health Insurance 91

HIPAA Journal

MAY 10, 2023

Suspicious activity was detected within its computer systems on February 1, 2023, and third-party cybersecurity experts were engaged to conduct a forensic analysis of the incident to determine the nature and scope of the attack. The investigation concluded on March 3, 2023, that files within its network were accessed.

Hospitals 108

Hospitals Ransomware Health Insurance Fraud 108

HIPAA Journal

JULY 6, 2023

UKG (Ultimate Kronos Group), a multinational provider of workforce management and human resources (HR) management services, has proposed a $6 million settlement to resolve claims related to a ransomware attack and data breach that was discovered in 2021. The deadline for exclusion from and objection to the settlement is September 18, 2023.

Ransomware 84

Ransomware COVID-19 Fraud HIPAA 84

HIT Consultant

AUGUST 7, 2024

These attacks most often lead to trojan horses, including ransomware, that are presently targeting the healthcare sector. As one of the most active ransomware-as-a-service (RaaS) threat actors today, Black Basta has set its sights on the healthcare sector, claiming responsibility for the recent attack on St.

Ransomware 116

Ransomware Fraud Hospitals Nurses 116

HIPAA Journal

MARCH 1, 2023

True Health New Mexico identified a security breach on October 5, 2021, with the investigation confirming that an unauthorized third party had gained access to its network and used ransomware to encrypt files. The deadline for objection to or exclusion from the settlement is April 14, 2023.

Fraud 110

Fraud Ransomware Health Insurance HIPAA 110

HIT Consultant

SEPTEMBER 4, 2024

Due to the high volume of valuable data stored on their networks, the healthcare industry is a ripe target for cyber criminals, with 725 data breaches reported to the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) in 2023. Of those breaches, more than 133 million records were exposed or impermissibly disclosed.

Ransomware 111

Ransomware HIPAA Compliance Doctors 111

HIPAA Journal

MARCH 13, 2023

According to the notification letter sent to the Maine Attorney General, unusual activity was detected within its internal network on January 28, 2023. Notification letters are now being mailed to all affected individuals.

Ransomware 109

Ransomware Fraud HIPAA 109

HIPAA Journal

AUGUST 2, 2023

The Chattanooga Heart Institute (CHI) in Tennessee has recently announced that it identified a cyberattack on its network on April 17, 2023. Notification letters will be sent to the affected individuals in the coming weeks and credit monitoring, fraud consultation, and identity theft restoration services will be offered.

Licensing 82

Licensing Electronic Medical Records Ransomware Health Insurance 82

HIT Consultant

JANUARY 3, 2023

With the advent of ransomware-as-a-service combined with a lack of resources to investigate attacks in-house for healthcare organizations, elaborate and devastating cyber attacks against healthcare, specifically through business communication channels are likely to increase in scale and sophistication. .

Compliance 52

Compliance Ransomware Fraud Regulatory Compliance 52

HIPAA Journal

JULY 12, 2023

District Court for the District of Maryland against Johns Hopkins University and Johns Hopkins Health System that allege a failure to properly secure and safeguard the protected health information of patients, resulting in the theft of their data by the Clop ransomware group.

Ransomware 87

Ransomware Fraud HIPAA 87

Healthcare IT Today

JANUARY 19, 2024

According to the 2023 ForgeRock Breach Report , healthcare has consistently ranked as the most targeted industry by cybercriminals for the past five years. The 2023 Verizon Breach Report further highlights vulnerabilities with the healthcare sector, identifying web applications as the number one attack vector.

Fraud 114

Fraud Governance Ransomware Compliance 114

HIPAA Journal

SEPTEMBER 13, 2023

A class action lawsuit has been filed against the student healthcare insurer UnitedHealthcare Services, which does business as UnitedHealthcare Student Resources, over its MOVEit Transfer data breach in May 2023. Ransom demands were issued, and payment was required to prevent the publication of stolen data on the group’s data leak site.

Ransomware 71

Ransomware Fraud Health Insurance HIPAA 71

HIPAA Journal

SEPTEMBER 12, 2023

Seymour, IN-based Schneck Medical Center has settled a lawsuit with the Indiana attorney general, Todd Rokita, over a 2021 ransomware attack and data breach that affected 89,707 Indiana residents. Schneck Medical Center Compensates Patients for Losses Schneck Medical Center has also recently settled a consolidated class action lawsuit for $1.3

HIPAA 98

HIPAA Ransomware Health Insurance Fraud 98

HIPAA Journal

JUNE 23, 2023

A lawsuit has been filed against Intellihartx, LLC, (aka ITx Companies), over a cyberattack by the Clop ransomware group that exploited a vulnerability in Fortra’s GoAnywhere Managed File Transfer (MFT) solution. Affected individuals were notified about the data breach on June 9, 2023, more than 4 months after the discovery of the attack.

HIPAA 98

HIPAA Ransomware Fraud Health Insurance 98

HIPAA Journal

AUGUST 11, 2023

Advanced Persistent Threat (APT) actors are known to be actively exploiting 9 of the vulnerabilities, and 7 are being actively exploited by ransomware gangs. The rise of weaponized exploits demands immediate, collective action to safeguard not only our technological integrity but, ultimately, patient safety.”

Electronic Medical Records 79

Electronic Medical Records Ransomware Fraud HIPAA 79

HIPAA Journal

MAY 18, 2023

Larger healthcare providers may temporarily divert ambulances and cancel some appointments following a ransomware attack but do not typically halt operations, but smaller healthcare providers may be left with little alternative. The notification process was completed on April 10, 2023.

Ransomware 77

Ransomware Fraud HIPAA Health Insurance 77

HIPAA Journal

JANUARY 24, 2023

Time will tell whether this trend will continue in 2023, although the lull in data breaches appears to have continued so far this year with an atypically low number of breaches currently showing on the OCR data breach portal this month. million in 2023, although data breaches can be significantly more expensive.

HIPAA 124

HIPAA Ransomware Hospitals Fraud 124

Healthcare IT Today

SEPTEMBER 7, 2023

The stolen data is often used to commit fraud, identity and intellectual theft, espionage, blackmail, extortion, etc., In March 2023, for example, Cerebral, a telehealth platform that provides online therapy and medication management to millions of users, reported a healthcare data breach that impacted more than 3.1

Fraud 120

Fraud Ransomware Compliance Hospitals 120

HIPAA Journal

APRIL 25, 2023

Santa Clara Family Health Plan Confirmed as Victim of Clop GoAnywhere Hack Santa Clara Family Health Plan has confirmed the 276,993-record data breach reported to the HHS’ Office for Civil Rights on March 30, 2023, was due to the hacking of Fortra’s GoAnywhere MFT solution by the Clop ransomware group.

Health Insurance 96

Health Insurance Public Health Ransomware Fraud 96

HIPAA Journal

JULY 27, 2023

Norton Healthcare, a Kentucky-based operator of more than 140 clinics and hospitals in Kentucky and Southern Indiana, is facing a class action lawsuit over a May 2023 cyberattack and data breach. On July 21, 2023, a class action lawsuit was filed in U.S.

Ransomware 52

Ransomware Fraud Licensing Health Insurance 52

HIT Consultant

AUGUST 13, 2023

billion in 2023. Here are seven identified cybersecurity vulnerabilities that can reveal a patient’s data and expose these healthcare organizations to fraud and fines: Limited budgets. Ransomware. MSPs and MSSPs can strengthen a healthcare organization’s cyber posture by locking down all points of compromise. Phishing scams.

Ransomware 98

Ransomware Fraud Health Insurance Public Health 98

Healthcare IT Today

APRIL 25, 2024

For a healthcare entity, the data and information are viewed as extremely valuable as it includes PII as well as other health information that can be used for insurance fraud and identity theft. The cost of allowing a data breach to occur can cause an exponential financial impact on an organization.

Ransomware 117

Ransomware Compliance Fraud Governance 117

HIPAA Journal

JANUARY 30, 2023

This will be followed by the preconference basic training day on March 2, 2023. Advance registration is required and there are Early Bird Discounts available to HIPAA Journal readers who are able to register for the event before February 3, 2023.

US Department of Health and Human Services 85

US Department of Health and Human Services HIPAA Compliance Medicaid 85

HIPAA Journal

MAY 18, 2023

HIPAA Enforcement by State Attorneys General in 2023 State attorneys general have imposed three financial penalties for HIPAA violations or equivalent violations of state laws. 2023 Ohio DNA Diagnostics Center $200,000 12,600 Stolen database containing 2.1 2023 Ohio DNA Diagnostics Center $200,000 12,600 Stolen database containing 2.1

HIPAA 103

HIPAA Compliance Ransomware Hospitals 103