HIPAA Journal

MARCH 10, 2022

The files exfiltrated from its systems included the protected health information of patients. Individuals whose Social Security number, driver’s license, state identification number, or financial account information may have been involved have been offered complimentary credit monitoring services.

Ransomware 130

Ransomware Licensing Health Insurance HIPAA 130

HIPAA Journal

JULY 5, 2022

Individuals who had their Social Security numbers or driver’s license numbers exposed have been offered complimentary credit monitoring and identity theft protection services. A limited number of patients also had financial account information exposed. A limited number of patients also had financial account information exposed.

Licensing 109

Licensing Electronic Medical Records Health Insurance Hospitals 109

HIPAA Journal

OCTOBER 17, 2022

The exposed information included names, dates of birth, Social Security numbers, driver’s license numbers, clinical/diagnosis information, health insurance member ID numbers, medical record numbers, and Medicare or Medicaid numbers.

Health Insurance 121

Health Insurance Licensing Fraud HIPAA 121

Bill of Health

OCTOBER 17, 2024

Finally, SB 1120 limits the degree to which health insurers can use AI to determine medical necessity for member health care services. SB 1223 amended the California Consumer Privacy Act of 2018 to include neural data as sensitive personal information, whose collection and use companies can be directed to limit.

Medicare 150

Medicare Medicare Health Insurance Licensing 150

HIPAA Journal

MARCH 25, 2022

AHA discovered the email breach in early September 2021 and determined on December 2, 2021, that files containing the protected health information of its healthcare provider clients had been accessed. UMC was a victim of a REvil ransomware attack in June 2021 that resulted in the theft of the protected health information of 1.3

Health Insurance 116

Health Insurance Licensing Ransomware Fraud 116

Healthcare IT News - Telehealth

MAY 26, 2021

Medgate's round-the-clock online treatment programme connects patients to licensed specialist doctors; provides e-prescriptions, laboratory requests and certificate of medical teleconsultation; and facilitates medicine delivery. World governments have also delivered telehealth services, free of charge, for their citizens.

Telemedicine 163

Telemedicine COVID-19 Doctors Licensing 163

Bill of Health

JUNE 15, 2023

Both Lilly and Novo invoked the unconstitutional conditions doctrine, which they argued prohibited the government from requiring them to relinquish their property without just compensation as a condition of participating in federal health-insurance programs. Both courts pointed to the Supreme Court’s decision in Ruckelhaus v.

Medicare 195

Medicare Medicare Medicaid Medicaid 195

HIPAA Journal

SEPTEMBER 8, 2023

For patients, the affected information included name, address, email, phone number(s), birth date, Social Security number, driver’s license number, health insurance policy information, treatment information including radiographic images, medical record number, account number, and health conditions.

Licensing 105

Licensing Ransomware Health Insurance HIPAA 105

HIPAA Journal

APRIL 25, 2024

The exposed and stolen data included contact information, Social Security numbers, driver’s license numbers, financial information, health insurance information, medical records, medical histories, diagnoses/conditions, and health insurance information.

Fraud 115

Fraud Health Insurance HIPAA Licensing 115

HIPAA Journal

JULY 14, 2022

The affected email accounts included names, Social Security numbers, driver’s licenses, financial account information, usernames and passwords, passport numbers, biometric data, medical information, health insurance information, electronic/digital signatures, and employer-assigned identification numbers.

Licensing 109

Licensing Health Insurance Ransomware HIPAA 109

HIPAA Journal

MARCH 18, 2022

Country Medical Services had run the hospital for 9 years; however, an investigation by the state Department of Health identified almost 3 dozen potential violations of the Emergency Medical Treatment and Labor Act, as the hospital was unable to provide emergency services.

Licensing 121

Licensing HIPAA Hospitals Health Insurance 121

The Health Law Firm Blog

JUNE 23, 2024

is Board Certified by The Florida Bar in Health Law On September 27, 2021, Humana agreed to pay $11.2 million to end claims that the health insurance company denied a group of nurses overtime pay by misclassifying them as exempt employees. By George F. Indest III, J.D., A Wisconsin federal judge approved the [.]

Health Insurance 52

Health Insurance Nurses Licensing Doctors 52

HIPAA Journal

MAY 24, 2022

While PHC did not state the nature of the cyberattack in its breach notification, the Hive ransomware gang has claimed responsibility for the attack and alleges around 400 GB of files were stolen, a sample of which was temporarily uploaded to the group’s data leak site.

Ransomware 136

Ransomware Licensing HIPAA Health Insurance 136

The Health Law Firm Blog

MAY 14, 2024

is Board Certified by The Florida Bar in Health Law On September 27, 2021, Humana agreed to pay $11.2 million to end claims that the health insurance company denied a group of nurses overtime pay by misclassifying them as exempt employees. By George F. Indest III, J.D., A Wisconsin federal judge approved the [.]

Health Insurance 52

Health Insurance Nurses Licensing Doctors 52

HIPAA Journal

JULY 8, 2024

Credit monitoring services must be provided if a consumer reporting agency is required to be notified by law and if the breach involved an individual’s Social Security number, bank account number, driver’s license number, or state identification number.

Licensing 120

Licensing HIPAA Health Insurance Compliance 120

HIPAA Journal

SEPTEMBER 9, 2022

Those emails contained patient information such as names, dates of birth, Social Security numbers, medical information, health insurance information, driver’s license numbers, and state ID numbers. The information exposed varied from patient to patient. Notification letters were sent to all affected individuals in August.

Licensing 109

Licensing Health Insurance Fraud HIPAA 109

HIPAA Journal

FEBRUARY 16, 2022

The information potentially compromised in the attack included names, dates of birth, Social Security numbers, medical diagnoses, treatment information, and health insurance information. Vendor Email Account Breach Affects Over 6,000 Memorial Hermann Health System Patients.

Electronic Medical Records 108

Electronic Medical Records Health Insurance Licensing HIPAA 108

HIPAA Journal

MARCH 4, 2022

Those files included information such as names, contact information, dates of birth, Social Security numbers, driver’s license numbers, treatment and diagnosis information, and/or health insurance information. The breach has been reported to the HHS’ Office for Civil Rights as affecting 10,324 individuals.

Health Insurance 127

Health Insurance Licensing HIPAA 127

HIPAA Journal

MARCH 14, 2022

CRMC said at this stage of the investigation it does not appear that the attackers gained access to its electronic medical record database; however, the files accessed or potentially accessed by the attackers included information such as patient names, addresses, birth dates, medical information, and health insurance information.

Electronic Medical Records 134

Electronic Medical Records Health Insurance HIPAA Licensing 134

HIPAA Journal

NOVEMBER 8, 2023

Third-party forensics experts were engaged to investigate the breach and determined that its systems were compromised between September 1, 2023, and September 5, 2023, and during that time, files were exfiltrated that contained personal and protected health information.

Ransomware 106

Ransomware Licensing Health Insurance HIPAA 106

HIPAA Journal

MAY 17, 2022

The review of the files revealed they mostly contained protected health information such as names, addresses, medical information, and/or health insurance information. Notification letters have now been sent to the 28,024 patients whose protected health information has potentially been compromised.

Licensing 94

Licensing Health Insurance Ransomware HIPAA 94

HIPAA Journal

AUGUST 3, 2022

The two health insurance firms confirmed they had been affected in late February 2022, with PracticeMax publicly reporting the breach in the fall of 2021. A server used by PracticeMax and several email accounts were affected and data on its systems was encrypted.

Ransomware 114

Ransomware Health Insurance Licensing HIPAA 114

Compliancy Group

DECEMBER 9, 2024

Patient files, clinical and treatment information, and information related to insurance or claim information, constitute electronic protected health information (ePHI) under the Health Insurance Portability and Accountability Act (HIPAA).

Ransomware 98

Ransomware Licensing HIPAA Compliance 98

HIPAA Journal

NOVEMBER 16, 2022

The review of the compromised email accounts confirmed they contain information such as names, addresses, dates of birth, driver’s license numbers, state identification card numbers, financial account numbers, usernames and passwords, payment card information, medical histories, and health insurance information.

HIPAA 94

HIPAA Licensing Health Insurance Fraud 94

HIPAA Journal

MAY 2, 2023

The accounts subjected to unauthorized access included information such as names, birthdates, addresses, health insurance member ID numbers, service dates, provider names, claim details, and group names and numbers. No Social Security numbers, financial information, or driver’s license numbers were exposed.

Licensing 102

Licensing Health Insurance Hospitals HIPAA 102

HIPAA Journal

MARCH 29, 2023

While there have been no reported instances of misuse of patient data, OU Health could not rule out unauthorized access to patient data. Notification letters were mailed to the affected individuals on March 24, 2023.

Hospitals 107

Hospitals Ransomware Licensing Health Insurance 107

HIPAA Journal

DECEMBER 14, 2022

One of the compromised email accounts was determined to contain the protected health information of CFA members, including names, addresses, birth dates, Social Security numbers, health insurance information, medical information, and billing and claims information. Patients started to be notified on November 23, 2022.

Health Insurance 117

Health Insurance HIPAA Licensing 117

HIPAA Journal

FEBRUARY 23, 2022

A review of the files on the affected server revealed they contained patient information including names, addresses, medical record numbers, dates of birth, telephone numbers, email addresses, insurance claim information, date(s) of service, treating/referring physician, medical bill account number, and/or health insurance informa­tion.

Electronic Medical Records 137

Electronic Medical Records HIPAA Health Insurance Medical Billing 137

HIT Consultant

FEBRUARY 28, 2023

. – Results are based on a survey of 400 consumers who have previously scheduled and completed telehealth visits and have a commercial health insurance plan.

Licensing 96

Licensing Doctors Health Insurance 96

HIPAA Journal

MAY 19, 2022

A comprehensive review of the affected files confirmed they contained information such as names, birth dates, addresses, Social Security numbers, driver’s license numbers, passport numbers, financial account information such as bank account and routing numbers, and online account usernames and passwords.

COVID-19 111

COVID-19 Health Insurance HIPAA Licensing 111

HIPAA Journal

NOVEMBER 11, 2024

No evidence has been found to indicate any misuse of that data; however, due to the sensitive nature of the information compromised in the incident, the affected individuals should take steps to protect themselves against misuse of their information.

Licensing 90

Licensing Health Insurance HIPAA 90

HIPAA Journal

JULY 3, 2024

The file review confirmed that the exposed data included first and last name, address, phone number, email address, birth date, gender, Social Security number, medical record number, clinical information, prescription information, medical information, health information, and health insurance information.

Ransomware 121

Ransomware Health Insurance Hospitals HIPAA 121

HIPAA Journal

DECEMBER 20, 2022

Work Health Solutions then verified contact information and sent notifications on November 9, 2022. The exposed files contained names, Social Security numbers, driver’s license numbers, health insurance information, and/or medical information. Luke’s Health Brazosport are known to have been affected.

Health Insurance 99

Health Insurance Licensing Hospitals Fraud 99

HIPAA Journal

APRIL 7, 2022

A subset of individuals also had their Social Security numbers and/or driver’s license numbers exposed. SuperCare Health said the security breach prompted a review of its security safeguards and additional security measures have now been implemented to better protect the personal and protected health information of its patients.

Licensing 132

Licensing HIPAA Health Insurance Hospitals 132

HIPAA Journal

MAY 2, 2023

COARC said the types of information involved included names and one or more of the following: address, social security number, financial account, credit card information, medical information, student information, driver’s license, and passport number.

Ransomware 102

Ransomware Licensing Health Insurance HIPAA 102

HIPAA Journal

JULY 5, 2024

At the time of issuing notifications, no reports had been received to suggest there had been any misuse of patient data. Mobile Medical Response is currently investigating the incident to determine the full name, scope, and impact of the event.

Health Insurance 79

Health Insurance Licensing HIPAA 79

HIPAA Journal

JANUARY 9, 2023

Live Oak Surgery Center is unaware of any misuse of patient data. Additional email security measures have been implemented to prevent further account breaches.

Licensing 117

Licensing HIPAA Health Insurance Governance 117