HIPAA Journal

MARCH 29, 2024

In February, Harvard Pilgrim Health Care revised the total number of individuals affected by an April 2023 ransomware attack, increasing the total by more than 81,000 to 2,632,275 individuals. Harvard Pilgrim Health Care said it is offering complimentary credit monitoring and identity protection services through IDX.

Ransomware 77

Ransomware HIPAA Health Insurance 77

HIPAA Journal

FEBRUARY 22, 2023

A lawsuit has been filed against Freehold Township, NJ-based CentraState Healthcare System over its December 2022 ransomware attack, a few days after the health system started sending notification letters to around 617,000 affected patients.

Ransomware 108

Ransomware Fraud Health Insurance HIPAA 108

HIPAA Journal

JUNE 13, 2023

Harvard Pilgrim Health Care and its parent company, Point32Health, are facing multiple class action lawsuits after hackers gained access to the protected health information (PHI) of more than 2.5 million individuals in an April 2023 ransomware attack. Harvard Pilgrim Health Care Inc. million customers.

Ransomware 103

Ransomware Fraud Health Insurance HIPAA 103

HIPAA Journal

AUGUST 8, 2023

The LockBit ransomware group has added Varian Medical Systems to its data leak site and has threatened to publish the data of cancer patients if the ransom is not paid. AAA said it was informed by PAB on May 11, 2023, that the data of some of its patients had potentially been compromised.

Ransomware 96

Ransomware Licensing HIPAA Health Insurance 96

HIPAA Journal

MAY 25, 2023

In April 2023, Point32Health, the second-largest health insurer in Massachusetts and the parent company of Tufts Health Plan and Harvard Pilgrim Health Care, announced it suffered a ransomware attack that resulted in system outages, including the systems that serviced members, accounts, brokers, and providers.

Ransomware 92

Ransomware Health Insurance Fraud HIPAA 92

HIPAA Journal

MARCH 10, 2023

A lawsuit has been filed against Maternal & Family Health Services (MFHS) in Pennsylvania which alleges the healthcare provider failed to protect patient data and did not send timely breach notifications. According to the notifications, unauthorized individuals gained access to its network and used ransomware to encrypt files.

Ransomware 97

Ransomware HIPAA Licensing Health Insurance 97

HIPAA Journal

MAY 26, 2023

That appears to be the case with two recent cyberattacks, neither of which mention ransomware or confirm that data theft occurred. AENT said it was able to determine that “an unauthorized actor may have had access to certain systems that stored personal and protected health information,” between March 23, 2023, and April 4, 2023.

Ransomware 63

Ransomware Health Insurance HIPAA Licensing 63

HIPAA Journal

JUNE 20, 2023

May 2023 was a particularly bad month for healthcare data breaches. More healthcare records have been breached in the first 5 months of 2023 (36,437,539 records) than in all of 2020 (29,298,012 records). The Money Message ransomware group exfiltrated 4.7 This was also a ransomware attack with data theft confirmed.

Ransomware 103

Ransomware HIPAA Compliance Health Insurance 103

HIPAA Journal

JULY 17, 2023

The notification was received on May 9, 2023, and a third-party incident response firm was engaged to investigate and determine the validity of the threat actor’s claims. The post Naked Patient Photos Published After Ransomware Attack on Plastic Surgery Clinic appeared first on HIPAA Journal. Gary Motykie were also published online.

Ransomware 98

Ransomware HIPAA Licensing Health Insurance 98

Healthcare IT Today

JANUARY 2, 2023

As we head into 2023, we wanted to kick off the new year with a series of 2023 Health IT predictions. We are going to see an increased demand for privacy-preserving technology in 2023, and therefore more investment in the space. during 2023. Check out our community’s healthcare Security and Risk predictions.

Ransomware 140

Ransomware Fraud Compliance Telemedicine 140

HIPAA Journal

FEBRUARY 21, 2023

Lehigh Valley Health Network (LVHN) in Pennsylvania has confirmed that it is dealing with a ransomware attack that was detected on February 6, 2023. An announcement was made on Monday confirming the Russian-speaking ransomware gang, BlackCat, was behind the attack and demanded a ransom, but no payment was made.

Ransomware 79

Ransomware HIPAA Health Insurance Governance 79

HIPAA Journal

JANUARY 9, 2023

Maternal & Family Health Services in Eastern Pennsylvania has recently notified certain patients about an April 4, 2022, ransomware attack in which sensitive patient data was exposed. Notifications were sent to affected individuals on January 3, 2023. Retreat Behavioral Health Ransomware Attack Affects Up to 23,620 Patients.

Ransomware 97

Ransomware HIPAA Licensing Health Insurance 97

HIPAA Journal

JANUARY 31, 2023

San Andreas Regional Center – was filed in the Superior Court of California in response to the breach alleging the healthcare provider was negligent for failing to implement reasonable cybersecurity measures to protect against ransomware attacks, despite being aware of the high risk of attacks on the healthcare sector.

Ransomware 63

Ransomware Fraud Health Insurance HIPAA 63

HIPAA Journal

JUNE 8, 2023

a provider of call center and customer experience software technology to large enterprises, has recently confirmed that it fell victim to a ransomware attack on a limited portion of its network. The post Alvaria Confirms November 2022 Hive Ransomware Attack appeared first on HIPAA Journal. (formerly Aspect Software, Inc.),

Ransomware 52

Ransomware Fraud HIPAA Health Insurance 52

HIPAA Journal

MARCH 29, 2024

It has been more than 5 weeks since Change Healthcare suffered a Blackcat ransomware attack. Department of State Offers $10 Million Reward for Information on ALPHV/Blackcat Ransomware Group The U.S. While around 20 services have now resumed, more than 100 are still offline.

Ransomware 99

Ransomware US Department of Health and Human Services HIPAA Hospitals 99

HIPAA Journal

FEBRUARY 7, 2023

Regal Medical Group, a San Bernardino, CA-based affiliate of the Heritage Provider Network, recently announced that it was attacked with ransomware. The forensic investigation confirmed that the attackers gained access to the servers on or around December 1 and exfiltrated files before the ransomware was deployed.

Ransomware 74

Ransomware Hospitals Licensing HIPAA 74

HIPAA Journal

FEBRUARY 23, 2023

Several class action lawsuits have been filed against Regal Medical Group and affiliated healthcare providers following the February 1, 2023, announcement that the protected health information (PHI) of up to 3,300,638 individuals had potentially been stolen in a December 2022 ransomware attack. ADOC Acquisition Co.,

Ransomware 119

Ransomware HIPAA Health Insurance Doctors 119

HIPAA Journal

MARCH 23, 2023

Associates in Dermatology, a network of dermatology clinics in Indiana, Kentucky, and New York, has started notifying patients that some of their protected health information has been exposed in a ransomware attack on one of its business associates.

Ransomware 74

Ransomware Electronic Medical Records Records Management HIPAA 74

HIPAA Journal

NOVEMBER 21, 2022

The Wisconsin-based dermatology practice, Forefront Dermatology, has agreed to settle a class action lawsuit filed on behalf of patients whose protected health information (PHI) was compromised in a ransomware attack in late May 2021. The final approval hearing has been scheduled for March 1, 2023.

Ransomware 68

Ransomware Fraud HIPAA Licensing 68

HIT Consultant

MARCH 13, 2024

Investigation Focuses on HIPAA Compliance The OCR enforces the Health Insurance Portability and Accountability Act (HIPAA) Privacy, Security, and Breach Notification Rules. These rules establish minimum standards for protecting patient privacy, securing electronic health information, and notifying individuals in case of a data breach.

Ransomware 116

Ransomware HIPAA Compliance Health Insurance 116

HIPAA Journal

APRIL 10, 2023

CommonSpirit Health has issued an update about its October 2022 ransomware attack and has confirmed that patients from 164 facilities were affected by the attack and had their sensitive data exposed or stolen. Those individuals were notified about the data breach in December.

Ransomware 99

Ransomware Hospitals Nurses HIPAA 99

HIPAA Journal

JULY 3, 2024

has confirmed that patient data has been compromised in a cyberattack, and the Monti ransomware group has claimed responsibility for a cyberattack on Wayne Memorial Hospital. They confirmed that an unauthorized actor gained access to its network on October 8, 2023, and maintained access until the breach was detected.

Ransomware 124

Ransomware Health Insurance Hospitals HIPAA 124

HIPAA Journal

SEPTEMBER 8, 2023

A security breach was detected on March 5, 2023, and systems were immediately taken offline to prevent further unauthorized access. A forensic investigation was initiated to determine the nature and scope of the attack, which confirmed there had been unauthorized access to its systems between February 3, 2023, and March 5, 2023.

Licensing 108

Licensing Ransomware Health Insurance HIPAA 108

HIPAA Journal

JUNE 15, 2023

Johns Hopkins University and Johns Hopkins Health System are investigating a May 31, 2023, cyberattack and data breach that targeted a widely used software tool. The security breach was discovered on April 4, 2023, and unauthorized access was immediately blocked. Notifies 24,400 Individuals About Data Breach iSpace, Inc.,

Ransomware 108

Ransomware Health Insurance Fraud HIPAA 108

HIPAA Journal

MAY 2, 2023

NYSARC Columbia County Chapter Notifies Individuals About July 2022 Ransomware Attack NYSARC Columbia County Chapter (COARC) has started notifying certain individuals that some of their protected health information has potentially been obtained by unauthorized individuals in a July 2022 ransomware attack.

Ransomware 106

Ransomware Licensing Health Insurance HIPAA 106

HIPAA Journal

MARCH 29, 2023

Atlantic General Hospital – Ransomware Attack Atlantic General Hospital (AGH) in Berlin, MD, has recently reported a ransomware attack to the Maine Attorney General that has affected up to 30,704 individuals. The attack was detected on January 29, 2023, when files were discovered to have been encrypted.

Hospitals 112

Hospitals Ransomware Licensing Health Insurance 112

HIPAA Journal

MAY 30, 2023

Morris Hospital & Healthcare Centers Investigating Royal Ransomware Attack Morris Hospital & Healthcare Centers in Illinois has launched an investigation into a cyberattack that the Royal ransomware group has claimed responsibility for. Norton did not state whether ransomware was used in the attack.

Ransomware 94

Ransomware Electronic Medical Records Health Insurance Hospitals 94

HIPAA Journal

FEBRUARY 8, 2024

Azura Vascular Care, a Pennsylvania-based operator of 70 outpatient vascular centers and ambulatory surgery centers in 25 states and Puerto Rico, notified the HHS’ Office for Civil Rights last month about a cybersecurity incident involving the protected health information of 348,000 patients. The incident was detected on November 9, 2023.

Ransomware 91

Ransomware Electronic Medical Records Licensing Health Insurance 91

HIPAA Journal

MAY 10, 2023

Suspicious activity was detected within its computer systems on February 1, 2023, and third-party cybersecurity experts were engaged to conduct a forensic analysis of the incident to determine the nature and scope of the attack. The investigation concluded on March 3, 2023, that files within its network were accessed.

Hospitals 108

Hospitals Ransomware Health Insurance Fraud 108

HIPAA Journal

JUNE 8, 2023

An unauthorized third party gained access to MCNA Dental’s systems on February 26, 2023, the breach was detected on March 6, 2023, and the unauthorized access was blocked the following day. Names, addresses, Social Security numbers, and health insurance were impermissibly disclosed. million individuals across the country.

Medicaid 90

Medicaid Medicaid Ransomware Health Insurance 90

HIPAA Journal

FEBRUARY 15, 2023

The medical device manufacturer Electromed has proposed a $850,000 settlement to resolve claims related to a June 2021 ransomware attack and data breach involving the protected health information of 47,200 individuals. The deadline for objection to and exclusion from the settlement is March 2, 2023.

Ransomware 97

Ransomware Fraud Licensing Health Insurance 97

HIPAA Journal

MAY 17, 2023

In April 2023, the Money Message ransomware group announced it had breached the systems of PharMerica and its parent company, BrightSpring Health Services, and added both to its data leak site. That makes it the largest healthcare data breach to be reported by a single HIPAA-covered entity so far in 2023.

Ransomware 107

Ransomware HIPAA Fraud Health Insurance 107

HIPAA Journal

JUNE 1, 2023

Details about the nature of the attack, such as if ransomware was used, have not been released at this stage, and it is too early to tell the extent to which patient information was involved. The security breach was detected on March 23, 2023, when files were discovered to have been encrypted, preventing access.

Hospitals 102

Hospitals Electronic Medical Records Ransomware Health Insurance 102

HIPAA Journal

JULY 27, 2023

UT Southwestern Medical Center (UTSW) has recently confirmed that the protected health information of 98,437 patients was stolen in a cyberattack on May 28, 2023. UTSW was notified about the attack by Progress Software on May 30, 2023, and the exploited vulnerability was immediately patched.

Ransomware 94

Ransomware Licensing Health Insurance HIPAA 94

HIPAA Journal

JUNE 8, 2023

The security breach was detected on April 4, 2023, and the forensic investigation confirmed its network had been accessed by an unauthorized third party between March 7, 2023, and April 4, 2023. According to the May 22, 2023, breach notice, the incidents occurred in 2021.

Ransomware 106

Ransomware HIPAA Licensing Health Insurance 106

HIPAA Journal

AUGUST 2, 2023

The Chattanooga Heart Institute (CHI) in Tennessee has recently announced that it identified a cyberattack on its network on April 17, 2023. A third-party data review company was provided with the files on December 22, 2022, and provided the results of the analysis to SHS on May 16, 2023.

Licensing 82

Licensing Electronic Medical Records Ransomware Health Insurance 82

HIPAA Journal

DECEMBER 13, 2022

Two healthcare organizations in Massachusetts have chosen to settle class action lawsuits that were filed by patients whose protected health information was stolen in cyberattacks. Class members have until January 14, 2023, to exclude themselves from or object to the settlement. Claims must be submitted by February 14, 2023.

Hospitals 102

Hospitals Ransomware HIPAA Health Insurance 102