HIPAA Journal

NOVEMBER 12, 2024

Cyberattacks involving unauthorized access to patient information have been reported by Physical Medicine & Rehabilitation Center in New Jersey (4,083 records) and Orthopedics Rhode Island(500 records). Passwords were reset and policies and procedures have been reviewed.

Health Insurance 49

Health Insurance Fraud Licensing HIPAA 49

HIPAA Journal

NOVEMBER 11, 2024

South West Family Medicine Associates South West Family Medicine Associates in Dallas, Texas, has notified 36,959 current and former patients and employees that some of their protected health information was compromised in an August security breach.

Licensing 59

Licensing Health Insurance HIPAA 59

HIPAA Journal

MARCH 16, 2023

Florida Medical Clinic, NorthStar Emergency Medical Services, Denver Public Schools, Wichita Urology Group, and The Bone & Joint Clinic have recently reported hacking incidents and the exposure and potential theft of protected health information. 95% of the compromised files only included an individual’s name.

Electronic Medical Records 68

Electronic Medical Records Health Insurance Ransomware HIPAA 68

HIPAA Journal

JULY 5, 2024

The Mount Kisco Surgery Center, doing business as the Ambulatory Surgery Center of Westchester in New York, has recently notified 22,139 patients that some of their protected health information has been exposed and potentially stolen. That process was completed on May 30, 2024, and then address information was verified.

Health Insurance 79

Health Insurance Licensing HIPAA 79

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems.

Fraud 93

Fraud Health Insurance Ransomware HIPAA 93

Bill of Health

OCTOBER 17, 2024

AB 3030 requires that health care providers disclose when they have used generative AI to create communications with patients. SB 1223 amended the California Consumer Privacy Act of 2018 to include neural data as sensitive personal information, whose collection and use companies can be directed to limit.

Medicare 150

Medicare Medicare Health Insurance Licensing 150

Total HIPAA

MAY 23, 2022

What is Protected Health Information (PHI)? The Health Insurance Portability and Accountability Act ( HIPAA ) is a 1996 federal law that regulates privacy standards in the healthcare sector. Today, the law serves the same purpose: to safeguard Protected Health Information in order to keep individuals safe.

HIPAA 98

HIPAA Due Diligence Compliance Health Insurance 98

HIPAA Journal

SEPTEMBER 8, 2023

Just Kids Dental Suffers Ransomware Attack Acadia Health, LLC, doing business as Just Kids Dental, has started notifying 129,623 patients that some of their protected health information was stolen in an August 2, 2023, ransomware attack. The types of information involved varied from individual to individual.

Licensing 110

Licensing Ransomware Health Insurance HIPAA 110

HIPAA Journal

JULY 8, 2024

Pennsylvania has updated its data breach notification law, narrowing the definition of personal information, adding the requirement to notify the state Attorney General, and requiring credit monitoring services to be provided to data breach victims in certain circumstances. The amended law takes effect on September 26, 2024.

Licensing 126

Licensing HIPAA Health Insurance Compliance 126

HIPAA Journal

APRIL 25, 2024

Several class action lawsuits have been filed against City of Hope National Medical Center, a National Cancer Institute (NCI)-designated cancer treatment and research center, over a recently disclosed data breach that exposed the protected health information of more than 827,000 individuals.

Fraud 124

Fraud Health Insurance HIPAA Licensing 124

HIPAA Journal

NOVEMBER 8, 2023

Third-party forensics experts were engaged to investigate the breach and determined that its systems were compromised between September 1, 2023, and September 5, 2023, and during that time, files were exfiltrated that contained personal and protected health information.

Ransomware 118

Ransomware Licensing Health Insurance HIPAA 118

HIPAA Journal

JULY 3, 2024

The file review confirmed that the exposed data included first and last name, address, phone number, email address, birth date, gender, Social Security number, medical record number, clinical information, prescription information, medical information, health information, and health insurance information.

Ransomware 129

Ransomware Health Insurance Hospitals HIPAA 129

HIPAA Journal

JULY 4, 2024

SkinCure Oncology has notified 13,434 patients about an email attack that occurred in June 2023, and the Wisconsin Department of Health Services has announced a breach of the personal information of 19,150 Medicaid recipients. Further information can be contained by calling SkinCure Oncology’s helpline – (866) 528-8844.

Medicaid 123

Medicaid Medicaid Fraud Licensing 123

HIPAA Journal

JULY 5, 2022

University Pediatric Dentistry in Buffalo, NY, has started notifying 6,843 patients that some of their protected health information has been exposed in an email security incident. A limited number of patients also had financial account information exposed.

Licensing 121

Licensing Electronic Medical Records Health Insurance Hospitals 121

HIPAA Journal

AUGUST 16, 2023

The information removed from its systems included names, addresses, dates of birth, Social Security numbers, driver’s license/State ID numbers, financial account information, payment card information, usernames/passwords, health insurance information, and medical information.

Licensing 95

Licensing Health Insurance HIPAA Public Health 95

HIPAA Journal

OCTOBER 17, 2022

Phoenix, AZ-based Valle del Sol Community Health has notified 70,268 patients that some of their protected health information has been exposed. Valle de Sol said the investigation indicated unauthorized individuals had access to files containing sensitive patient data and that patient information may have been acquired.

Health Insurance 136

Health Insurance Licensing Fraud HIPAA 136

HIPAA Journal

APRIL 30, 2024

On April 10, 2024, Livanova confirmed that the personal and protected health information of U.S. The affected individuals have been advised to monitor their credit reports and account statements and to be alert to unsolicited communications involving personal information. patients.

Ransomware 109

Ransomware Licensing Health Insurance HIPAA 109

HIPAA Journal

APRIL 23, 2024

A cybersecurity firm was engaged to investigate the disruption and confirmed that unauthorized individuals accessed its network and exfiltrated files containing the personal information of residents. It took more than 10 months (April 10, 2024) to determine the types of information involved and the number of individuals affected.

Ransomware 115

Ransomware Fraud Licensing HIPAA 115

HIPAA Journal

MAY 2, 2023

United HealthCare (UHC) has started notifying certain members that some of their protected health information may have been disclosed to unauthorized individuals as a result of credential stuffing attacks on the UHC mobile application. No Social Security numbers, financial information, or driver’s license numbers were exposed.

Licensing 117

Licensing Health Insurance Hospitals HIPAA 117

HIPAA Journal

APRIL 8, 2024

De Felice , around 5TB of data was stolen by the Medusa group including the protected health information of an estimated 37,700 patients. The investigation uncovered evidence of unauthorized access to files that contained patient information.

Ransomware 84

Ransomware Health Insurance Licensing HIPAA 84

HIPAA Journal

MARCH 10, 2022

A round-up of 6 cyberattacks that have recently been reported by healthcare providers and business associates that resulted in the exposure and possible theft of patients’ protected health information. The files exfiltrated from its systems included the protected health information of patients.

Ransomware 140

Ransomware Licensing Health Insurance HIPAA 140

HIPAA Journal

NOVEMBER 12, 2024

Health & Palliative Services of the Treasure Coast in Florida and Universal Health Corporation in Virginia have discovered unauthorized access to their email systems and the exposure of patients’ protected health information.

HIPAA 49

HIPAA Licensing Health Insurance Medicaid 49

HIPAA Journal

NOVEMBER 16, 2022

Unauthorized individuals have gained access to the email system of the Administrative Fund of the Detectives’ Endowment Association of the Police Department of the City of New York (NYCDEA) and potentially viewed or obtained the protected health information of 21,544 individuals.

HIPAA 114

HIPAA Licensing Health Insurance Fraud 114

HIPAA Journal

MAY 2, 2023

NYSARC Columbia County Chapter Notifies Individuals About July 2022 Ransomware Attack NYSARC Columbia County Chapter (COARC) has started notifying certain individuals that some of their protected health information has potentially been obtained by unauthorized individuals in a July 2022 ransomware attack.

Ransomware 121

Ransomware Licensing Health Insurance HIPAA 121

HIPAA Journal

MARCH 29, 2023

A third-party computer forensics firm was engaged to assist with the investigation and determined that there was unauthorized access to files containing patient information from January 20, 2023. OU Health – Stolen Laptop Computer OU Medicine Inc. Notification letters were mailed to the affected individuals on March 24, 2023.

Hospitals 125

Hospitals Ransomware Licensing Health Insurance 125

HIPAA Journal

MARCH 25, 2022

Ultimate Care said no reports have been received that indicate there has been any misuse of patient information; however, as a precaution against identity theft and fraud, individuals whose Social Security numbers were impacted have been offered complimentary one-year memberships with a credit monitoring service.

Health Insurance 124

Health Insurance Licensing Ransomware Fraud 124

HIPAA Journal

MAY 17, 2022

The review of the files revealed they mostly contained protected health information such as names, addresses, medical information, and/or health insurance information. NuLife said no reports have been received to date to indicate any patient information has been misused.

Health Insurance 94

Health Insurance Licensing Ransomware HIPAA 94

HIPAA Journal

AUGUST 2, 2023

The administrative service provider said suspicious activity was detected within its network in early December 2022, and the forensic investigation confirmed on December 15, 2022, that an unauthorized third party accessed parts of its computer network where personal health information was stored.

Licensing 95

Licensing Electronic Medical Records Ransomware Health Insurance 95

HIPAA Journal

JULY 3, 2023

Unauthorized individuals gained access to its network and exfiltrated files containing sensitive patient information. Precision Imaging Centers said no evidence of misuse of personal information has been detected. Efforts were then made to contact the affected clients and obtain up-to-date contact information.

Health Insurance 98

Health Insurance Licensing Ransomware HIPAA 98

HIPAA Journal

SEPTEMBER 9, 2022

Birmingham, AL-based Henderson & Walton Women’s Center (HWWC) has recently notified 34,306 patients that some of their protected health information may have been compromised as a result of a hacker gaining access to the email account of one of its employees. The information exposed varied from patient to patient.

Licensing 123

Licensing Health Insurance Fraud HIPAA 123

HIPAA Journal

JULY 14, 2022

The affected email accounts included names, Social Security numbers, driver’s licenses, financial account information, usernames and passwords, passport numbers, biometric data, medical information, health insurance information, electronic/digital signatures, and employer-assigned identification numbers.

Licensing 121

Licensing Health Insurance Ransomware HIPAA 121

HIPAA Journal

JUNE 21, 2023

Atlanta Women’s Health Group, P.C., has recently confirmed that the protected health information of up to 33,839 current and former patients has been exposed and potentially stolen in an April 2023 cyberattack. Around 5% of the affected individuals also had their financial information stolen.

Health Insurance 104

Health Insurance Licensing HIPAA Medicare 104

HIPAA Journal

JUNE 8, 2023

The Iowa Department of Health and Human Services has announced there have been three separate breaches of the protected health information of Iowa Medicaid recipients in the past two months – two hacking incidents and an impermissible disclosure, all three of which involved third-party contractors.

Medicaid 98

Medicaid Medicaid Ransomware Health Insurance 98

HIPAA Journal

JULY 5, 2024

The nature of the access was not disclosed; however, Providence said there is an active investigation by the California Department of Insurance. The review confirmed that only names, State IDs, driver’s license numbers, and health insurance coverage information were accessed.

Licensing 123

Licensing HIPAA Health Insurance Hospitals 123

HIPAA Journal

DECEMBER 20, 2022

Work Health Solutions, a San Jose, CA-based occupational health services provider, has confirmed that the protected health information of 13,157 individuals has been exposed and potentially obtained by unauthorized individuals who had access to an employee email account between February 16, 2-022 and March 24, 2022.

Health Insurance 114

Health Insurance Licensing Hospitals Fraud 114

HIPAA Journal

JUNE 30, 2023

On April 29, 2023, it was confirmed that files had been exfiltrated that included patient information such as names, dates of birth, addresses, Social Security numbers, driver’s license numbers, and clinical information, such as provider names, dates of service, and/or diagnoses.

Licensing 98

Licensing Health Insurance Records Management HIPAA 98

HIPAA Journal

DECEMBER 14, 2022

CFA was informed about the breach on June 23, 2022. One of the compromised email accounts was determined to contain the protected health information of CFA members, including names, addresses, birth dates, Social Security numbers, health insurance information, medical information, and billing and claims information.

Health Insurance 124

Health Insurance HIPAA Licensing 124