HIPAA Journal

MARCH 28, 2025

The account was reviewed, and on January 24, 2025, it was confirmed that emails in the account contained the protected health information of patients of Beacon Health Systems Three Rivers Health Hospital in Michigan. The post Beacon Health System Affected by Two Business Associate Email Breaches appeared first on The HIPAA Journal.

Licensing 61

Licensing Health Insurance HIPAA Medicaid 61

Healthcare It News

MAY 12, 2023

"We're not only capitalizing on the capabilities of GPT, we're doing so in a highly secure, HIPAA-compliant manner through Microsoft Azure," he added. "Dave provides smart, personalized and accessible information instantaneously, which can greatly improve the quality of care and life for millions of patients worldwide."

HIPAA 357

HIPAA Medical Billing FDA Licensing 357

HIPAA Journal

JULY 11, 2022

Phoenixville Hospital Fires Employee for HIPAA Violation. When the privacy violation was discovered, the employee was immediately suspended pending an internal investigation and was later fired for the HIPAA breach. Some of the accessed records included partial Social Security numbers and health insurance information.

Hospitals 121

Hospitals HIPAA Health Insurance Licensing 121

Compliancy Group

FEBRUARY 23, 2022

Keeping your dental office compliant with HIPAA and OSHA regulations is one more thing to juggle. HIPAA and OSHA training for dental offices is an essential part of compliance. Be able to prove the HIPAA and OSHA training was done. Know the most common HIPAA and OSHA citations and violations. These include: HIPAA.

HIPAA 122

HIPAA Compliance Licensing 122

Healthcare It News

SEPTEMBER 21, 2023

Eric Liederman, director of medical informatics for the Kaiser Permanente Medical Group, says good communications with patients about cybersecurity protection is essential – even as risks to protected health information are on the rise, from external bad actors and insider threats. "What's going on?

Governance 338

Governance HIPAA Ransomware Licensing 338

Healthcare IT Today

OCTOBER 8, 2024

Most of the data that we are looking to share is highly sensitive health information, the kind of information that cybercriminals love to hold for ransom. We believe that the best way to protect that information is to not store it. So not only is it highly sensitive, it is also highly sought-after.

US Department of Health and Human Services 124

US Department of Health and Human Services HIPAA Regulatory Compliance Public Health 124

HIPAA Journal

MARCH 11, 2025

The file review confirmed that the types of data compromised in the cyberattack included names, addresses, dates of birth, Social Security numbers, drivers license numbers, medical information, and health insurance information.

Department of Veterans Affairs 81

Department of Veterans Affairs Licensing Ransomware Fraud 81

HIPAA Journal

DECEMBER 24, 2022

Penalties for HIPAA violations can be issued by the Department of Health and Human Services’ Office for Civil Rights (OCR) and state attorneys general. In addition to financial penalties, covered entities are required to adopt a corrective action plan to bring policies and procedures up to the standards demanded by HIPAA. .

HIPAA 122

HIPAA Compliance Hospitals COVID-19 122

HIPAA Journal

JANUARY 1, 2023

A limited data set under HIPAA is a set of identifiable healthcare information that the HIPAA Privacy Rule permits covered entities to share with certain entities for research purposes, public health activities, and healthcare operations without obtaining prior authorization from patients, if certain conditions are met.

HIPAA 98

HIPAA Licensing Public Health Compliance 98

HIPAA Journal

MARCH 25, 2025

Numotion said it has no reason to believe that the accounts were accessed to obtain personal information, and no evidence has been found to indicate any information in the accounts has been stolen and misused. That email breach involved the protected health information of 2,319 individuals.

Ransomware 66

Ransomware HIPAA Licensing Health Insurance 66

HIPAA Journal

NOVEMBER 16, 2022

Unauthorized individuals have gained access to the email system of the Administrative Fund of the Detectives’ Endowment Association of the Police Department of the City of New York (NYCDEA) and potentially viewed or obtained the protected health information of 21,544 individuals.

HIPAA 109

HIPAA Licensing Health Insurance Fraud 109

HIPAA Journal

MAY 2, 2022

6 data breaches have recently been reported by HIPAA-regulated entities that have collectively resulted in the exposure and potential theft of the protected health information of tens of thousands of individuals. Valley View Hospital did not state in its substitute breach notice what types of information had been compromised.

HIPAA 110

HIPAA Health Insurance Licensing Hospitals 110

HIPAA Journal

DECEMBER 23, 2022

It has been another bad year for healthcare data breaches, with some of the biggest HIPAA breaches of 2022 resulting in the impermissible disclosure of well over a million records. The Biggest HIPAA Breaches of 2022. The 12 biggest HIPAA breaches of 2022 affected almost 22.66 million patients and health plan members.

HIPAA 103

HIPAA Ransomware Health Insurance Compliance 103

HIPAA Journal

SEPTEMBER 12, 2023

Schneck Medical Center has agreed to pay a penalty of $250,000 to resolve alleged violations of the Health Insurance Portability and Accountability Act (HIPAA) and state laws and will implement additional safeguards to prevent further data breaches.

HIPAA 102

HIPAA Ransomware Health Insurance Fraud 102

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems. The breach was detected on October 22, 2021.

Fraud 112

Fraud Health Insurance Ransomware HIPAA 112

HIPAA Journal

APRIL 1, 2025

On October 9, 2023, Azura Vascular Care identified suspicious network activity, with the forensic investigation confirming that hackers had access to its network between September 27, 2023, and October 9, 2023, during which time they potentially stole the protected health information of patients. The post Azura Vascular Care Agrees to $3.15

Licensing 52

Licensing HIPAA Compliance 52

HIPAA Journal

JANUARY 10, 2024

Stripe is not HIPAA compliant and – other than its payment processing services – should not be used by covered entities and business associates to create, collect, store, or transmit Protected Health Information (PHI). Is Stripe HIPAA Compliant? Stripe complies with multiple US and International data privacy regulations (i.e.,

HIPAA 94

HIPAA US Department of Health and Human Services Fraud Telemedicine 94

HIPAA Journal

JANUARY 2, 2023

The settlements pursued by the Department of Health and Human Services’ Office for Civil Rights (OCR) are for egregious violations of HIPAA Rules. Settlements are also pursued to highlight common HIPAA violations to raise awareness of the need to comply with specific aspects of HIPAA Rules. Are Data Breaches HIPAA Violations?

HIPAA 106

HIPAA Compliance Hospitals Medicare 106

HIPAA Journal

DECEMBER 30, 2022

Avalon Healthcare has agreed to settle alleged violations of the Health Insurance Portability and Accountability Act (HIPAA) and state laws with the Oregon and Utah Attorneys General that were uncovered during an investigation of a 2019 breach of the personal and protected health information of 14,500 of its employees and patients.

HIPAA 98

HIPAA Compliance Compliance Officers Licensing 98

Bill of Health

JUNE 5, 2023

medical licensing exam , diagnose illnesses , and even outshine human doctors on measures of perceived empathy , raising many questions about how AI will reshape health care as we know it. In the field of medicine, ChatGPT already has been reported to ace the U.S. But what happens when AI gets things wrong?

Malpractice 213

Malpractice FDA HIPAA Doctors 213

HIPAA Journal

AUGUST 10, 2023

The Ottumwa Fire Department in Iowa has recently fired employees for alleged violations of the HIPAA Rules and other misconduct. Clinical information that could have been accessed included diagnoses, lab results, medications, and procedures. Kye and Keith are entitled to request a hearing.

HIPAA 95

HIPAA Ransomware Licensing Health Insurance 95

HIPAA Journal

JUNE 5, 2023

If your HIPAA-covered organization is planning to use Microsoft Teams to collect, store, share, or transmit electronic PHI, it is important to know how to make Microsoft Teams HIPAA compliant. How to Make Microsoft Teams HIPAA Compliant No software is HIPAA compliant.

HIPAA 89

HIPAA Due Diligence Compliance Licensing 89

HIPAA Journal

APRIL 11, 2025

million people that some of their personal and health information has been exposed or stolen in a recent hacking incident. Health insurance information such as plan names, plan types, insurance companies, and member/group ID numbers. Million People appeared first on The HIPAA Journal.

Ransomware 58

Ransomware Fraud HIPAA Licensing 58

HIPAA Journal

APRIL 2, 2025

The post SimonMed Imaging Confirms January 2025 Cyberattack appeared first on The HIPAA Journal. At least one class action lawsuit has already been filed against SimonMed over the incident.At present, no data breach is displayed on the HHS Office for Civil Rights breach portal, so it is unclear how many individuals have been affected.

Ransomware 52

Ransomware Licensing HIPAA Health Insurance 52

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems. The breach was detected on October 22, 2021.

Fraud 95

Fraud Health Insurance Ransomware HIPAA 95

HIPAA Journal

MARCH 11, 2025

The data review was completed on February 13, 2025, and confirmed that names, dates of birth, Social Security numbers, medical information, treatment information, healthcare provider information, and health insurance information had been exposed.

Ransomware 59

Ransomware HIPAA Licensing Health Insurance 59

Total HIPAA

JULY 12, 2022

Also, without a properly configured website with SSL/TLS certificates, any information you access on a website that is not encrypted is easily intercepted in transit. Many internet service providers offer SSL/TLS licenses for free or for less than $100/year. Depending on a third party to protect your information.

HIPAA 98

HIPAA Compliance Licensing COVID-19 98

HIPAA Journal

MARCH 18, 2022

the former operator of Eastern Ozarks Regional Health System in Cherokee Village, and owners Robert Becht of Hartsville, TN, and Theresa Hanson of Deland, FL, for mishandling the sensitive personal and protected information of thousands of individuals. I am holding the hospital and its owners accountable.”.

Licensing 124

Licensing HIPAA Hospitals Health Insurance 124

Healthcare IT Today

OCTOBER 25, 2023

Sriram Rajagopalan , Enterprise Agile Evangelist at Inflectra Today’s most significant risk regarding security and privacy issues in health services is consumers’ need for more awareness of personal health information. Technology is growing faster than we can catch up, and we are giving away our personal information too soon.

HIPAA 119

HIPAA Licensing Doctors Nurses 119

Healthcare IT Today

MARCH 26, 2025

As the sector adapts, telehealth providers must navigate new compliance challenges, particularly regarding controlled substances, data privacy, and multi-state licensing. While telehealth is federally recognized, each state maintains its own set of rules governing online prescribing , provider licensing, and telehealth modalities.

FDA 52

FDA Compliance Licensing Fraud 52

HIPAA Journal

FEBRUARY 23, 2022

Logan Health Medical Center in Kalispell, MT, has recently started notifying certain patients that hackers gained access to a file server that housed patient information in “a highly sophisticated criminal attack.”. The types of information in the compromised files varied from patient to patient.

Electronic Medical Records 142

Electronic Medical Records HIPAA Health Insurance Medical Billing 142

HIPAA Journal

MAY 24, 2022

PHC has now confirmed in a breach notification to the Maine Attorney General that the protected health information of 854,913 current and former health plan members has potentially been stolen, making this one of the largest healthcare data breaches to be reported so far this year.

Ransomware 139

Ransomware Licensing HIPAA Health Insurance 139

Healthcare IT News - Telehealth

JUNE 27, 2023

They said customers who decline HIPAA consent on the website are prevented from completing their patient registration with Amazon Clinic and are redirected to a third-party provider information page.

HIPAA 170

HIPAA Telemedicine Licensing 170

HIPAA Journal

FEBRUARY 16, 2022

Family Christian Health Center (FCHC) in Illinois has announced it was the victim of a ransomware attack in November 2021 that compromised the protected health information of 31,000 patients. The attackers compromised FCHC’s old dental system which contained the PHI of patients who had received dental services prior to August 31, 2020.

Ransomware 130

Ransomware Hospitals Licensing HIPAA 130

HIPAA Journal

MARCH 10, 2022

A round-up of 6 cyberattacks that have recently been reported by healthcare providers and business associates that resulted in the exposure and possible theft of patients’ protected health information. The files exfiltrated from its systems included the protected health information of patients. Duncan Regional Hospital.

Ransomware 139

Ransomware Licensing Health Insurance HIPAA 139

HIPAA Journal

JULY 8, 2024

Pennsylvania has updated its data breach notification law, narrowing the definition of personal information, adding the requirement to notify the state Attorney General, and requiring credit monitoring services to be provided to data breach victims in certain circumstances. The amended law takes effect on September 26, 2024.

Licensing 120

Licensing HIPAA Health Insurance Compliance 120

HIPAA Journal

MARCH 23, 2022

a Pittsburgh, PA-based non-profit healthcare company and Integrated Delivery Network has recently announced that some HIPAA-protected data has been exposed in a data breach at the printing and mailing vendor, Quantum Group, which was used by its vendor, Webb Mason, which provides marketing services to Highmark. Highmark Inc.,

HIPAA 135

HIPAA Licensing Health Insurance Governance 135