HIPAA Journal

JULY 14, 2023

There has been a sizeable fall in revenues from cryptocurrency-related crimes in the first half of 2023, with scammers seeing a 77% reduction in revenues from the same period in 2022, amassing a little over $1 billion in the first half of the year compared to $3.3 million in payments were made following ransomware attacks.

Ransomware 88

Ransomware Fraud HIPAA 88

HIPAA Journal

JUNE 21, 2023

Onix Group, a Pennsylvania-based real estate development firm and provider of business management and consulting services, is being sued for failing to prevent a ransomware attack in which the hackers stole the protected health information of 320,000 individuals. The ransomware attack was detected by Onix Group on March 27.

Ransomware 102

Ransomware Fraud HIPAA 102

HIPAA Journal

SEPTEMBER 1, 2023

The San Francisco, CA-based law firm, Orrick, Herrington & Sutcliffe LLP, is facing a class action lawsuit over a ransomware attack and data breach that was detected on March 13, 2023. On August 11, 2023, a lawsuit was filed in the U.S.

Ransomware 87

Ransomware Fraud HIPAA 87

HIPAA Journal

MAY 25, 2023

In April 2023, Point32Health, the second-largest health insurer in Massachusetts and the parent company of Tufts Health Plan and Harvard Pilgrim Health Care, announced it suffered a ransomware attack that resulted in system outages, including the systems that serviced members, accounts, brokers, and providers.

Ransomware 91

Ransomware Health Insurance Fraud HIPAA 91

HIPAA Journal

MAY 18, 2023

The breach was detected by NextGen on March 30, 2023, and the forensic investigation confirmed hackers had access to its network between March 29, 2023, and April 14, 2023. This was the second data breach to be reported by NextGen this year, with the earlier incident being a BlackCat ransomware attack.

Ransomware 124

Ransomware Fraud HIPAA 124

HIPAA Journal

JANUARY 31, 2023

San Andreas Regional Center – was filed in the Superior Court of California in response to the breach alleging the healthcare provider was negligent for failing to implement reasonable cybersecurity measures to protect against ransomware attacks, despite being aware of the high risk of attacks on the healthcare sector.

Ransomware 63

Ransomware Fraud Health Insurance HIPAA 63

HIPAA Journal

MARCH 30, 2023

Ransomware and phishing continue to be the biggest cybersecurity concerns for healthcare organizations according to the February 2023 Current and Emerging Healthcare Cyber Threat Landscape report from Health-ISAC. Ransomware was the biggest concern for 2022 and 2023 with phishing and spear phishing in second.

Ransomware 106

Ransomware Fraud Governance Medical Billing 106

HIPAA Journal

MAY 17, 2023

In April 2023, the Money Message ransomware group announced it had breached the systems of PharMerica and its parent company, BrightSpring Health Services, and added both to its data leak site. That makes it the largest healthcare data breach to be reported by a single HIPAA-covered entity so far in 2023.

Ransomware 106

Ransomware HIPAA Fraud Health Insurance 106

HIPAA Journal

NOVEMBER 21, 2022

The Wisconsin-based dermatology practice, Forefront Dermatology, has agreed to settle a class action lawsuit filed on behalf of patients whose protected health information (PHI) was compromised in a ransomware attack in late May 2021. The final approval hearing has been scheduled for March 1, 2023.

Ransomware 68

Ransomware Fraud HIPAA Licensing 68

Compliancy Group

DECEMBER 20, 2024

The settlement is the third ransomware settlement entered into by OCR. On October 31, 2017, OCR initiated a compliance review of HVHS after the media reported that HVHS had experienced a ransomware attack. OCR imposed the ransomware civil monetary penalty for potential HIPAA Security Rule violations.

Ransomware 52

Ransomware HIPAA Fraud Electronic Medical Records 52

HIPAA Journal

JUNE 15, 2023

Johns Hopkins University and Johns Hopkins Health System are investigating a May 31, 2023, cyberattack and data breach that targeted a widely used software tool. The security breach was discovered on April 4, 2023, and unauthorized access was immediately blocked. At this stage, it is unclear how many individuals have been affected.

Ransomware 107

Ransomware Health Insurance Fraud HIPAA 107

HIPAA Journal

FEBRUARY 15, 2023

The medical device manufacturer Electromed has proposed a $850,000 settlement to resolve claims related to a June 2021 ransomware attack and data breach involving the protected health information of 47,200 individuals. The deadline for objection to and exclusion from the settlement is March 2, 2023. A lawsuit – Lutz, et al.

Ransomware 95

Ransomware Fraud Licensing Health Insurance 95

HIPAA Journal

MARCH 3, 2023

The attack was conducted by the Sodinokibi ransomware group, which published some of the stolen data on its data leak site. Claims will also be accepted up to a maximum of $3,500 per claimant to cover documented, extraordinary losses that have not already been reimbursed, such as losses to fraud and identity theft.

Ransomware 91

Ransomware Fraud HIPAA 91

HIPAA Journal

MAY 10, 2023

Suspicious activity was detected within its computer systems on February 1, 2023, and third-party cybersecurity experts were engaged to conduct a forensic analysis of the incident to determine the nature and scope of the attack. The investigation concluded on March 3, 2023, that files within its network were accessed.

Hospitals 107

Hospitals Ransomware Health Insurance Fraud 107

Healthcare IT Today

JANUARY 19, 2024

According to the 2023 ForgeRock Breach Report , healthcare has consistently ranked as the most targeted industry by cybercriminals for the past five years. The 2023 Verizon Breach Report further highlights vulnerabilities with the healthcare sector, identifying web applications as the number one attack vector.

Fraud 123

Fraud Governance Ransomware Compliance 123

HIPAA Journal

JUNE 5, 2023

Multiple class action lawsuits have been filed against the city of Oakland in California over a ransomware attack and data breach that involved the theft of the personal and protected health information of 13,000 current and former employees. The ransomware attack is understood to have started with phishing emails.

Ransomware 58

Ransomware Fraud HIPAA 58

HIPAA Journal

MARCH 1, 2023

True Health New Mexico identified a security breach on October 5, 2021, with the investigation confirming that an unauthorized third party had gained access to its network and used ransomware to encrypt files. The deadline for objection to or exclusion from the settlement is April 14, 2023.

Fraud 108

Fraud Ransomware Health Insurance HIPAA 108

HIPAA Journal

MARCH 13, 2023

According to the notification letter sent to the Maine Attorney General, unusual activity was detected within its internal network on January 28, 2023. Notification letters are now being mailed to all affected individuals.

Ransomware 107

Ransomware Fraud HIPAA 107

HIT Consultant

AUGUST 7, 2024

These attacks most often lead to trojan horses, including ransomware, that are presently targeting the healthcare sector. As one of the most active ransomware-as-a-service (RaaS) threat actors today, Black Basta has set its sights on the healthcare sector, claiming responsibility for the recent attack on St.

Ransomware 116

Ransomware Fraud Hospitals Doctors 116

HIPAA Journal

FEBRUARY 8, 2024

The incident was detected on November 9, 2023. Cybersecurity experts were engaged to assist with the investigation, which confirmed that unauthorized individuals accessed certain systems on or before September 27, 2023, and encrypted certain files. It is not clear from the notification letters when the intrusion occurred.

Ransomware 90

Ransomware Electronic Medical Records Licensing Health Insurance 90

HIPAA Journal

JUNE 8, 2023

a provider of call center and customer experience software technology to large enterprises, has recently confirmed that it fell victim to a ransomware attack on a limited portion of its network. The post Alvaria Confirms November 2022 Hive Ransomware Attack appeared first on HIPAA Journal. (formerly Aspect Software, Inc.),

Ransomware 52

Ransomware Fraud HIPAA Health Insurance 52

HIPAA Journal

JANUARY 24, 2023

Time will tell whether this trend will continue in 2023, although the lull in data breaches appears to have continued so far this year with an atypically low number of breaches currently showing on the OCR data breach portal this month. million in 2023, although data breaches can be significantly more expensive.

HIPAA 122

HIPAA Ransomware Hospitals Fraud 122

HIPAA Journal

JULY 6, 2023

UKG (Ultimate Kronos Group), a multinational provider of workforce management and human resources (HR) management services, has proposed a $6 million settlement to resolve claims related to a ransomware attack and data breach that was discovered in 2021. The deadline for exclusion from and objection to the settlement is September 18, 2023.

Ransomware 82

Ransomware COVID-19 Fraud HIPAA 82

HIT Consultant

SEPTEMBER 4, 2024

Due to the high volume of valuable data stored on their networks, the healthcare industry is a ripe target for cyber criminals, with 725 data breaches reported to the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) in 2023. Of those breaches, more than 133 million records were exposed or impermissibly disclosed.

Ransomware 111

Ransomware HIPAA Compliance Doctors 111

HIPAA Journal

JUNE 23, 2023

A lawsuit has been filed against Intellihartx, LLC, (aka ITx Companies), over a cyberattack by the Clop ransomware group that exploited a vulnerability in Fortra’s GoAnywhere Managed File Transfer (MFT) solution. Affected individuals were notified about the data breach on June 9, 2023, more than 4 months after the discovery of the attack.

HIPAA 97

HIPAA Ransomware Fraud Health Insurance 97

HIPAA Journal

SEPTEMBER 12, 2023

Seymour, IN-based Schneck Medical Center has settled a lawsuit with the Indiana attorney general, Todd Rokita, over a 2021 ransomware attack and data breach that affected 89,707 Indiana residents. Schneck Medical Center Compensates Patients for Losses Schneck Medical Center has also recently settled a consolidated class action lawsuit for $1.3

HIPAA 96

HIPAA Ransomware Health Insurance Fraud 96

HIPAA Journal

JULY 12, 2023

District Court for the District of Maryland against Johns Hopkins University and Johns Hopkins Health System that allege a failure to properly secure and safeguard the protected health information of patients, resulting in the theft of their data by the Clop ransomware group.

Ransomware 85

Ransomware Fraud HIPAA 85

HIPAA Journal

AUGUST 2, 2023

The Chattanooga Heart Institute (CHI) in Tennessee has recently announced that it identified a cyberattack on its network on April 17, 2023. Notification letters will be sent to the affected individuals in the coming weeks and credit monitoring, fraud consultation, and identity theft restoration services will be offered.

Licensing 80

Licensing Electronic Medical Records Ransomware Health Insurance 80

Healthcare IT Today

SEPTEMBER 7, 2023

The stolen data is often used to commit fraud, identity and intellectual theft, espionage, blackmail, extortion, etc., In March 2023, for example, Cerebral, a telehealth platform that provides online therapy and medication management to millions of users, reported a healthcare data breach that impacted more than 3.1

Fraud 99

Fraud Ransomware Compliance Hospitals 99

HIPAA Journal

APRIL 25, 2023

Santa Clara Family Health Plan Confirmed as Victim of Clop GoAnywhere Hack Santa Clara Family Health Plan has confirmed the 276,993-record data breach reported to the HHS’ Office for Civil Rights on March 30, 2023, was due to the hacking of Fortra’s GoAnywhere MFT solution by the Clop ransomware group.

Health Insurance 95

Health Insurance Public Health Ransomware Fraud 95

Healthcare IT Today

APRIL 25, 2024

For a healthcare entity, the data and information are viewed as extremely valuable as it includes PII as well as other health information that can be used for insurance fraud and identity theft. The cost of allowing a data breach to occur can cause an exponential financial impact on an organization.

Ransomware 126

Ransomware Compliance Fraud Governance 126

HIT Consultant

DECEMBER 18, 2024

Data breaches, ransomware attacks, and system vulnerabilities have emerged as major disruptors, threatening sensitive patient information and the very foundation of patient care. In 2023, more than 133 million healthcare records were exposed or stolen due to data breaches.

Ransomware 95

Ransomware Fraud Doctors HIPAA 95

HIPAA Journal

MAY 18, 2023

Larger healthcare providers may temporarily divert ambulances and cancel some appointments following a ransomware attack but do not typically halt operations, but smaller healthcare providers may be left with little alternative. The notification process was completed on April 10, 2023.

Ransomware 77

Ransomware Fraud HIPAA Health Insurance 77

HIPAA Journal

SEPTEMBER 13, 2023

A class action lawsuit has been filed against the student healthcare insurer UnitedHealthcare Services, which does business as UnitedHealthcare Student Resources, over its MOVEit Transfer data breach in May 2023. Ransom demands were issued, and payment was required to prevent the publication of stolen data on the group’s data leak site.

Ransomware 71

Ransomware Fraud Health Insurance HIPAA 71

HIT Consultant

AUGUST 13, 2023

billion in 2023. Here are seven identified cybersecurity vulnerabilities that can reveal a patient’s data and expose these healthcare organizations to fraud and fines: Limited budgets. Ransomware. MSPs and MSSPs can strengthen a healthcare organization’s cyber posture by locking down all points of compromise. Phishing scams.

Ransomware 98

Ransomware Fraud Health Insurance Public Health 98

HIPAA Journal

AUGUST 11, 2023

Advanced Persistent Threat (APT) actors are known to be actively exploiting 9 of the vulnerabilities, and 7 are being actively exploited by ransomware gangs. The rise of weaponized exploits demands immediate, collective action to safeguard not only our technological integrity but, ultimately, patient safety.”

Electronic Medical Records 77

Electronic Medical Records Ransomware Fraud HIPAA 77

HIT Consultant

JANUARY 3, 2023

With the advent of ransomware-as-a-service combined with a lack of resources to investigate attacks in-house for healthcare organizations, elaborate and devastating cyber attacks against healthcare, specifically through business communication channels are likely to increase in scale and sophistication. .

Compliance 52

Compliance Ransomware Fraud Regulatory Compliance 52