HIPAA Journal

JUNE 13, 2022

Yuma Regional Medical Center (YRMC) in Arizona has announced it was the victim of a ransomware attack in April in which the attackers obtained the protected health information of approximately 700,000 current and former patients. Ransomware attacks often result in the exposure of stolen data if the ransom is not paid.

Ransomware 133

Ransomware Electronic Medical Records HIPAA Health Insurance 133

HIPAA Journal

JULY 4, 2022

According to the company’s substitute breach notice, a sophisticated ransomware attack was detected and blocked on February 26, 2022; however, not in time to prevent some of its computer systems from being disabled. Third-party forensics specialists were engaged to investigate the breach and provide assistance with securing its environment.

Ransomware 136

Ransomware HIPAA Health Insurance Governance 136

HIPAA Journal

APRIL 8, 2024

The Medusa ransomware group has leaked data stolen from American Renal Associates. Moffitt Cancer Center has been affected by a cyberattack on a vendor, and Family Health Center in Michigan and Zuckerberg San Francisco General Hospital have reported the exposure of patient data.

Ransomware 78

Ransomware Health Insurance Licensing HIPAA 78

HIPAA Journal

NOVEMBER 23, 2022

The Rochester Hills, MI-based prosthetics, orthotics, and accessibility solution provider, Wright & Filippis, has recently announced that it was the victim of a ransomware attack on its network. The post 877,500 Individuals Affected by Ransomware Attack on Prosthetics & Orthotics Provider appeared first on HIPAA Journal.

Ransomware 119

Ransomware Fraud Licensing HIPAA 119

HIPAA Journal

MARCH 29, 2024

In February, Harvard Pilgrim Health Care revised the total number of individuals affected by an April 2023 ransomware attack, increasing the total by more than 81,000 to 2,632,275 individuals. The post Harvard Pilgrim Health Care Increases Ransomware Victim Count to 2.86 Million appeared first on HIPAA Journal.

Ransomware 77

Ransomware HIPAA Health Insurance 77

HIPAA Journal

MAY 25, 2022

SAC Health said it is unaware of any actual or attempted misuse of patient data as a result of the break-in; however, as a precaution against identity theft and fraud, affected individuals have been offered complimentary credit monitoring services. Bryan County Ambulance Authority Ransomware Attack Affects 14,000 Patients.

Ransomware 134

Ransomware Fraud HIPAA Licensing 134

HIPAA Journal

AUGUST 3, 2022

Fast Track Urgent Care, a network of urgent healthcare clinics in Florida, has confirmed that 258,411 individuals have had their protected health information exposed and potentially stolen in a ransomware attack on billing and practice management vendor, PracticeMax.

Ransomware 116

Ransomware Health Insurance Licensing HIPAA 116

HIPAA Journal

JUNE 13, 2023

Harvard Pilgrim Health Care and its parent company, Point32Health, are facing multiple class action lawsuits after hackers gained access to the protected health information (PHI) of more than 2.5 million individuals in an April 2023 ransomware attack. Harvard Pilgrim Health Care Inc. Harvard Pilgrim Health Care, Inc.

Ransomware 103

Ransomware Fraud Health Insurance HIPAA 103

HIPAA Journal

MARCH 28, 2023

A New York law firm that suffered a LockBit ransomware attack has agreed to pay a financial penalty of $200,000 to the New York Attorney General to resolve alleged violations of New York General Business Law and the Privacy and Security Rules of the Health Insurance Portability and Accountability Act (HIPAA).

HIPAA 112

HIPAA Ransomware Malpractice Health Insurance 112

HIPAA Journal

AUGUST 3, 2022

The health insurer Aetna ACE is one of the latest healthcare organizations to announce it has been affected by a ransomware attack on a mailing vendor, which involved the protected health information of 326,278 plan members. companies, including billing vendors used by healthcare organizations.

Ransomware 135

Ransomware HIPAA Health Insurance 135

HIPAA Journal

MARCH 30, 2022

Oklahoma City Indian Clinic and Law Enforcement Health Benefits Inc. have confirmed they were recent victims of cyberattacks, both of which involved the use of ransomware. Ransomware Attack Affects 85,282 Law Enforcement Health Benefits Members. Law Enforcement Health Benefits, Inc.

Ransomware 136

Ransomware Electronic Medical Records HIPAA Licensing 136

HIPAA Journal

APRIL 1, 2022

Partnership Health Plan of California Recovering from Suspected Ransomware Attack. The Fairfield, CA-based nonprofit managed care health plan, Partnership Health Plan of California (PHC), has suffered a cyberattack that has taken its IT systems out of action for more than a week. That claim has since been removed.

Ransomware 111

Ransomware HIPAA Health Insurance 111

HIPAA Journal

DECEMBER 23, 2022

It has been another bad year for healthcare data breaches, with some of the biggest HIPAA breaches of 2022 resulting in the impermissible disclosure of well over a million records. The Biggest HIPAA Breaches of 2022. The 12 biggest HIPAA breaches of 2022 affected almost 22.66 million patients and health plan members.

HIPAA 93

HIPAA Ransomware Health Insurance Compliance 93

HIPAA Journal

JANUARY 31, 2023

UCLA Health said it has since enhanced its technology evaluation procedures. The complete list of affected individuals was finalized on November 3, 2022, and in accordance with HIPAA, a substitute breach notice was placed on its website from May 6, 2022, to August 9, 2022, confirming a security breach had occurred.

Ransomware 94

Ransomware HIPAA Health Insurance Hospitals 94

HIPAA Journal

MARCH 29, 2024

It has been more than 5 weeks since Change Healthcare suffered a Blackcat ransomware attack. Department of State Offers $10 Million Reward for Information on ALPHV/Blackcat Ransomware Group The U.S. The AHA expressed concern about Fontes Rainer’s statement and is seeking clarification on which entities need to issue notifications.

Ransomware 99

Ransomware US Department of Health and Human Services HIPAA Hospitals 99

HIPAA Journal

FEBRUARY 22, 2023

A lawsuit has been filed against Freehold Township, NJ-based CentraState Healthcare System over its December 2022 ransomware attack, a few days after the health system started sending notification letters to around 617,000 affected patients.

Ransomware 108

Ransomware Fraud Health Insurance HIPAA 108

Compliancy Group

MAY 27, 2022

Almost as surely as summer follows spring, lawsuits follow breaches of protected health information. Here’s a roundup of recent HIPAA breach lawsuits and settlements. Lawsuits Increasing Following HIPAA Breaches – Facts and Figures. 35% of healthcare breaches involved ransomware attacks, vs. 20% in 2020.

HIPAA 98

HIPAA Ransomware Hospitals Compliance 98

HIPAA Journal

MARCH 1, 2022

Ransomware attacks have recently been reported by four healthcare providers across the country, which have collectively resulted in the exposure and potential theft of the protected health information of more than 49,000 individuals. The post Four Healthcare Providers Hit with Ransomware Attacks appeared first on HIPAA Journal.

Ransomware 143

Ransomware Licensing HIPAA Health Insurance 143

HIPAA Journal

MARCH 10, 2023

According to the notifications, unauthorized individuals gained access to its network and used ransomware to encrypt files. MFHS said the sophisticated ransomware attack was discovered in April 2022. The post Maternal & Family Health Services Sued Over Ransomware Attack and Data Breach appeared first on HIPAA Journal.

Ransomware 97

Ransomware HIPAA Licensing Health Insurance 97

HIPAA Journal

AUGUST 17, 2022

According to the breach notification sent to the California Attorney General, Practice Resources was the victim of a ransomware attack on April 12, 2022. The post Ransomware Attack on New York Billing Company Affects 942K Individuals appeared first on HIPAA Journal.

Ransomware 133

Ransomware HIPAA Hospitals Health Insurance 133

HIPAA Journal

JANUARY 5, 2023

Back in June 2022 , HIPAA Journal reported on a cyberattack on Fitzgibbon Hospital in Marshall, MO, after being contacted directly by a spokesperson for a threat group called DAIXIN Team, who claimed responsibility for the attack. The post Ransomware Attack at Fitzgibbon Hospital Affects 112,000 Patients appeared first on HIPAA Journal.

Ransomware 123

Ransomware Hospitals HIPAA Licensing 123

HIPAA Journal

MAY 25, 2023

In April 2023, Point32Health, the second-largest health insurer in Massachusetts and the parent company of Tufts Health Plan and Harvard Pilgrim Health Care, announced it suffered a ransomware attack that resulted in system outages, including the systems that serviced members, accounts, brokers, and providers.

Ransomware 92

Ransomware Health Insurance Fraud HIPAA 92

Med-Net Compliance

JULY 12, 2022

A ransomware attack on a finance company has affected more than 600 healthcare organizations. On February 26, 2022, the company detected and stopped a sophisticated ransomware attack in which an unauthorized third party accessed and disabled some of their computer systems. Update as new information becomes available.

Ransomware 59

Ransomware HIPAA Health Insurance Nurses 59

Med-Net Compliance

OCTOBER 17, 2022

The second largest nonprofit hospital chain in the United States has confirmed that it has fallen victim to a ransomware attack. The hospital chain said that upon discovering the ransomware attack they took immediate steps to protect their systems, contain the incident, begin an investigation, and ensure continuity of care.

Ransomware 59

Ransomware Hospitals HIPAA Nurses 59

HIPAA Journal

JANUARY 27, 2023

Des Plaines, IL-based Lutheran Social Services of Illinois, one of the largest providers of social services in the state, has announced that its systems were compromised and ransomware was used to encrypt files. This coincides with the 60-day reporting deadline of the HIPAA Breach Notification Rule.

Ransomware 101

Ransomware HIPAA Fraud Licensing 101

HIT Consultant

JUNE 27, 2024

The healthcare sector has been a prime target for cyberattacks and data breaches over the last several years, which makes compliance with the Health Insurance Accountability and Portability Act (HIPAA) all the more important. Worse still, these breaches result in non-compliance with the guidelines established by HIPAA.

HIPAA 97

HIPAA Compliance Patient Satisfaction Nursing Homes 97

HIPAA Journal

AUGUST 8, 2023

The LockBit ransomware group has added Varian Medical Systems to its data leak site and has threatened to publish the data of cancer patients if the ransom is not paid. McAlester Regional Health Center has not verified the claim and has yet to announce a data breach on its website or report the incident to the HHS’ Office for Civil Rights.

Ransomware 96

Ransomware Licensing HIPAA Health Insurance 96

HIPAA Journal

JULY 17, 2023

Attacks that involve the theft of naked images offer threat actors an easy way to increase pressure on the victim to make payment, as was the case with a ransomware attack on Lehigh Valley Health Network earlier this year by the ALPHV/BlackCat ransomware group.

Ransomware 98

Ransomware HIPAA Licensing Health Insurance 98

HIPAA Journal

FEBRUARY 15, 2023

Teijin Automotive Technologies Says Welfare Plan Data Compromised in December Ransomware Attack Teijin Automotive Technologies has recently confirmed the protected health information of 25,464 members of its welfare plan has potentially been accessed and stolen in a December 1, 2022, ransomware attack.

Ransomware 98

Ransomware Health Insurance Electronic Medical Records HIPAA 98

Compliancy Group

SEPTEMBER 5, 2023

To many people’s surprise, the vibrant city of Dallas has recently descended into chaos as it grapples with the aftermath of a treacherous ransomware attack. As stated by HHS spokesperson Gabriela Sibori in an email response, an investigation is done with “every large breach reported by a HIPAA regulated entity.” Please Wait.

Ransomware 98

Ransomware HIPAA Compliance Health Insurance 98

Med-Net Compliance

JUNE 30, 2022

A medical center in Arizona announced it was the victim of a ransomware attack in which the attackers obtained the protected health information [PHI] of approximately 700,000 current and former patients. The PHI in the files included patient names, social security numbers, health insurance information, and limited medical information.

Ransomware 59

Ransomware HIPAA Health Insurance Nurses 59

HIPAA Journal

MAY 18, 2023

The Department of Health and Human Services’ Office for Civil Rights is the main enforcer of HIPAA compliance; however, state Attorneys General also play a role in enforcing compliance with the Rules of the Health Insurance Portability and Accountability Act (HIPAA). Community Health Systems/CHSPSC, Anthem Inc.,

HIPAA 103

HIPAA Compliance Ransomware Hospitals 103

HIPAA Journal

APRIL 28, 2022

Irvine, CA-based Smile Brands, a provider of support services for dental offices, has recently provided an update on the number of individuals affected by a ransomware attack that was discovered on April 24, 2021. The post Up to 2,592,494 individuals Affected by Smile Brands Ransomware Attack appeared first on HIPAA Journal.

Ransomware 119

Ransomware Health Insurance HIPAA Licensing 119

HIPAA Journal

JANUARY 9, 2023

Maternal & Family Health Services in Eastern Pennsylvania has recently notified certain patients about an April 4, 2022, ransomware attack in which sensitive patient data was exposed. Retreat Behavioral Health Ransomware Attack Affects Up to 23,620 Patients.

Ransomware 97

Ransomware HIPAA Licensing Health Insurance 97

Compliancy Group

FEBRUARY 14, 2022

A ransomware hack of Morley Companies Inc. The provider of business process outsourcing and meeting solutions to dozens of Fortune 500 companies revealed the ransomware hacking incident in a filing with the Office of the Maine Attorney General and a post on their website. Details of Morley Companies Ransomware Hack. Learn More!

Ransomware 52

Ransomware HIPAA Health Insurance Compliance 52

HIPAA Journal

NOVEMBER 28, 2022

(HHS) has recently announced that it was the victim of a ransomware attack. The investigation revealed an unauthorized third party first accessed its systems on June 10, 2022, several days prior to using ransomware to encrypt files. Ransomware Attack Affects Patients of Disability Services of the Southwest.

Ransomware 114

Ransomware Electronic Medical Records HIPAA Licensing 114

HIPAA Journal

FEBRUARY 23, 2023

Several class action lawsuits have been filed against Regal Medical Group and affiliated healthcare providers following the February 1, 2023, announcement that the protected health information (PHI) of up to 3,300,638 individuals had potentially been stolen in a December 2022 ransomware attack. ADOC Acquisition Co.,

Ransomware 119

Ransomware HIPAA Health Insurance Doctors 119