HIPAA Journal

JANUARY 2, 2023

The settlements pursued by the Department of Health and Human Services’ Office for Civil Rights (OCR) are for egregious violations of HIPAA Rules. Settlements are also pursued to highlight common HIPAA violations to raise awareness of the need to comply with specific aspects of HIPAA Rules. Are Data Breaches HIPAA Violations?

HIPAA 107

HIPAA Compliance Hospitals Medicare 107

Healthcare IT News - Telehealth

JUNE 3, 2020

He noted the moves by the Centers for Medicare and Medicaid Services to reimburse providers for services and allow telehealth care between states , and the relaxed HIPAA regulations around technology use , as important contributors to the uptick in telehealth availability.

Telemedicine 213

Telemedicine COVID-19 HIPAA Medicare 213

HIPAA Journal

JULY 4, 2024

SkinCure Oncology has notified 13,434 patients about an email attack that occurred in June 2023, and the Wisconsin Department of Health Services has announced a breach of the personal information of 19,150 Medicaid recipients. The helpline is manned Monday to Friday from 8:00 a.m. to 5:30 p.m. Central Time. Central Time.

Medicaid 120

Medicaid Medicaid Fraud Licensing 120

HIPAA Journal

FEBRUARY 16, 2022

The system contained patients’ names, birth dates, insurance card numbers, driver’s license numbers, and copies of patients’ insurance cards and driver’s licenses. The post Patient Data Compromised in Ransomware Attacks on Family Christian Health Center & Jackson County Hospital appeared first on HIPAA Journal.

Ransomware 132

Ransomware Hospitals Licensing HIPAA 132

HIPAA Journal

OCTOBER 7, 2022

On August 5, 2022, Anthem discovered that an unauthorized individual had gained access to a database and downloaded files containing plan members’ protected health information, including names, addresses, dates of birth, phone numbers, email addresses, Medicare ID numbers, and Medicaid ID numbers.

HIPAA 114

HIPAA Health Insurance Medicaid Medicaid 114

HIPAA Journal

JUNE 26, 2023

HIPAA enforcement discretion occurs when the Secretary for Health and Human Services (HHS) announces the Department will exercise discretion in the enforcement of HIPAA Rules. Typically, Notices of Enforcement Discretion last between 72 hours and 60 days, are state or region-specific and apply to specific provisions of the HIPAA Rules.

HIPAA 70

HIPAA COVID-19 COVID-19 Vaccine Public Health 70

HIPAA Journal

OCTOBER 17, 2022

The exposed information included names, dates of birth, Social Security numbers, driver’s license numbers, clinical/diagnosis information, health insurance member ID numbers, medical record numbers, and Medicare or Medicaid numbers. Valle De Sol said it has not received any reports from patients to suggest any misuse of their data.

Health Insurance 136

Health Insurance Licensing Fraud HIPAA 136

Healthcare IT News - Telehealth

SEPTEMBER 9, 2020

"If you're not licensed in that state, you can't practice medicine through a virtual medium in a non-COVID world," he said. He also pointed to the easing of HIPAA restrictions by the U.S. "It's a different legal arrangement." Department of Health and Human Services Office of Civil Rights.

COVID-19 153

COVID-19 Doctors HIPAA Telemedicine 153

HIPAA Journal

MAY 19, 2022

Million Data Breach Settlement Gets Preliminary Approval appeared first on HIPAA Journal. The breach was reported to the HHS’ Office for Civil Rights as affecting 114,007 individuals. The post Solara Medical Supplies $9.76

Licensing 124

Licensing HIPAA Health Insurance Medicaid 124

HIPAA Journal

SEPTEMBER 9, 2022

Those emails contained patient information such as names, dates of birth, Social Security numbers, medical information, health insurance information, driver’s license numbers, and state ID numbers. appeared first on HIPAA Journal. The information exposed varied from patient to patient.

Licensing 119

Licensing Health Insurance Fraud HIPAA 119

HIPAA Journal

MARCH 14, 2022

A subset of patients also had their Social Security numbers, driver’s license numbers, and/or financial account information exposed. The post Capital Region Medical Center and Labette Health Announce Potential PHI Breaches appeared first on HIPAA Journal.

Electronic Medical Records 142

Electronic Medical Records Health Insurance HIPAA Licensing 142

HIPAA Journal

MARCH 25, 2022

The files contained first and last names, Social Security numbers, drivers’ license information, dates of birth, health insurance information, medical treatment information, and financial account information. The attached file contained information such as member names, ID numbers, Medicare/Medicaid numbers, and dates of birth.

Health Insurance 120

Health Insurance Licensing Ransomware Fraud 120

HIPAA Journal

MARCH 10, 2022

Individuals whose Social Security number, driver’s license, state identification number, or financial account information may have been involved have been offered complimentary credit monitoring services. The post 6 Healthcare Providers and Business Associates Report Hacks and Ransomware Attacks appeared first on HIPAA Journal.

Ransomware 140

Ransomware Licensing Health Insurance HIPAA 140

HIPAA Journal

MARCH 6, 2023

The types of information exposed varied from individual to individual and may have included names, addresses, medical information, health insurance information, Medicaid identification numbers, driver’s licenses, account and routing numbers, and Social Security numbers.

Electronic Medical Records 101

Electronic Medical Records HIPAA Licensing Nurses 101

HIPAA Journal

JUNE 16, 2023

Further information on the data breach has been covered by The HIPAA Journal here. The letters included Medicaid benefit information, although only around 200 of the 5,800 individuals affected had either their Medicare health insurance claim number (HICN) or Social Security number disclosed.

Medicaid 102

Medicaid Medicaid HIPAA Health Insurance 102

HIPAA Journal

MAY 25, 2022

The post SAC Health Theft Incident and Multiple Ransomware Attacks Reported appeared first on HIPAA Journal. Lifespan said multiple layers of protection were in place, and additional security measures have now been implemented.

Ransomware 137

Ransomware Fraud HIPAA Licensing 137

Compliancy Group

NOVEMBER 25, 2024

Providers can appear on this list for a range of reasons varying from convictions related to Medicare or Medicaid fraud or even cases of patient abuse or licensing issues. In cases like this, checking the employee’s information against Medicaid databases could also be helpful.

Compliance 52

Compliance Fraud Medicaid Medicaid 52

Healthcare IT News - Telehealth

JANUARY 23, 2023

In 2023, HIMSS will not only be working to prop up telehealth further with really strong data on how these services help patients to achieve broader reform, but will also work at the state level with licensing boards to discuss how telemedicine can reach more patients. Part 2 – with HIPAA.

Medicare 189

Medicare Medicare Governance Medicaid 189

HIPAA Journal

OCTOBER 18, 2022

Prompt notification is a requirement of the HIPAA Breach Notification Rule and is important for patients, as it allows them to take appropriate steps to protect themselves against misuse of their information. The post 235,000 Keystone Health Patients Affected by August 2022 Cyberattack appeared first on HIPAA Journal.

HIPAA 122

HIPAA Health Insurance Licensing Medicaid 122

HIPAA Journal

SEPTEMBER 14, 2022

The files contained names, addresses, email addresses, birth dates, Social Security numbers, driver’s license numbers, state ID numbers, health insurance provider names, medical diagnoses, treatment information, medications, and lab results. The types of information exposed in the attack varied from patient to patient.

Ransomware 107

Ransomware Licensing HIPAA Health Insurance 107

Compliancy Group

JANUARY 3, 2025

There are a variety of reasons that a provider can end up on this list, from committing fraud, providing care with a suspended license, or being involved in patient abuse cases. Aside from monetary losses, employing or contracting someone on these exclusion lists can result in the loss of Medicaid reimbursements. There has been a 4.2%

Medicaid 52

Medicaid Medicaid Compliance Fraud 52

Verisys

NOVEMBER 8, 2023

CMS.gov The Administrative Simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) required the creation of a standard, unique health identifier for healthcare providers, which the NPI satisfies. While health plans may use other numbers internally, the NPI is mandatory for HIPAA transactions.

Fraud 97

Fraud HIPAA Medicare Medicare 97

HIPAA Journal

APRIL 13, 2022

The post Resources for Human Development, WellStar Health & Central Vermont Eye Care Announce Data Breaches appeared first on HIPAA Journal. This post will be updated when further information becomes available.

Ransomware 120

Ransomware HIPAA Licensing Health Insurance 120

HIPAA Journal

JULY 4, 2023

Affected individuals had one or more of the following exposed: name, address, driver’s license number, health insurance information, medical information, date of birth, and Social Security number. The post 559,000 Individuals Affected by Murfreesboro Medical Clinic & SurgiCenter Cyberattack appeared first on HIPAA Journal.

Medicaid 97

Medicaid Medicaid Health Insurance Licensing 97

HIPAA Journal

NOVEMBER 17, 2022

HIPAA Journal is conducting interviews with healthcare professionals and service providers to find out more about their compliance journeys, how the HIPAA Rules have affected their working lives, and the successes and challenges they have faced with HIPAA compliance. When did you first get involved with HIPAA compliance?

Governance 107

Governance HIPAA Compliance Nursing Homes 107

HIPAA Journal

JULY 31, 2023

The Department of Health and Human Services’ Centers for Medicare and Medicaid Services (CMS) has confirmed that the PHI of approximately 612,000 current Medicare recipients was exposed in this incident and up to 645,000 individuals in total. The CMS said it is working with Maximus to provide notice to the affected individuals.

Governance 97

Governance Medicare Medicare Ransomware 97

HIPAA Journal

MAY 16, 2022

The post Refuah Health Center Alerts 260K Patients About May 2021 Cyberattack appeared first on HIPAA Journal. RiverKids said additional email security measures have been implemented to prevent further security incidents.

Health Insurance 117

Health Insurance Ransomware HIPAA Licensing 117

Healthcare IT News - Telehealth

MARCH 29, 2022

With a shortage of physicians to address the growing need for care, a lack of providers who accept Medicaid, and access issues due to transportation or office hour challenges, healthcare organizations are looking to technology to help bridge the gap. Addressing the increasing need for behavioral health services is a nationwide challenge.

COVID-19 147

COVID-19 Nursing Homes Nurses Licensing 147

HIPAA Journal

NOVEMBER 12, 2024

The post Data Breaches Announced by New Jersey Rehabilitation Center & Rhode Island Orthopedic Practice appeared first on The HIPAA Journal. The breach has recently been reported to the HHS’ Office for Civil Rights as affecting 500 individuals.

Health Insurance 85

Health Insurance Fraud Licensing HIPAA 85

HIPAA Journal

JUNE 28, 2023

The post Good Samaritan Hospital Settles Class Action Data Breach Lawsuit appeared first on HIPAA Journal. A lawsuit – Young, et al. The class members were represented by Joshua B Swigart of Swigart Law Group AFC and Gayle M Blatt of Casey Gerry Schenk Francavilla Blatt & Penfield LLP.

Hospitals 102

Hospitals Fraud Licensing HIPAA 102

Healthcare IT Today

MARCH 27, 2023

Their API-driven platform can be aligned to meet brand needs and securely houses patient PII with its built in HIPAA compliance software. Clinicians can manage appointments, write prescriptions, chart notes and handle booking and payments all in one place.

Licensing 115

Licensing Health Outcomes Medicaid Medicaid 115

HIPAA Journal

APRIL 8, 2022

The post Data Breaches Reported by WV and CO Healthcare Providers and NJ Medical Billing Administrator appeared first on HIPAA Journal. CPP has issued notification letters to affected individuals and is offering complimentary identity theft protection services.

Medical Billing 133

Medical Billing Licensing Health Insurance Medicaid 133

HIPAA Journal

NOVEMBER 15, 2022

– over the data breach that allege the company was negligent for failing to implement appropriate safeguards to ensure the confidentiality, integrity, and availability of patient information, that Somnia failed to comply with FTC guidelines and the HIPAA Rules and had not followed industry standards for data security.

HIPAA 83

HIPAA Fraud Licensing Health Insurance 83

HIPAA Journal

NOVEMBER 12, 2024

The post Health & Palliative Services of the Treasure Coast & Universal Health Corporation Suffer Email Breaches appeared first on The HIPAA Journal. Universal Health Corporation is reviewing its data security policies and procedures and has implemented additional safeguards to prevent similar breaches in the future.

HIPAA 83

HIPAA Licensing Health Insurance Medicaid 83

HIPAA Journal

AUGUST 8, 2023

Precision Anesthesia Billing LLC Reports Breach of the PHI of 209,200 Individuals The Tampa, FL-based HIPAA business associate, Precision Anesthesia Billing LLC (PAB), reported a breach of the protected health information of 209,200 individuals to the HHS’ Office for Civil Rights on July 7, 2023.

Ransomware 98

Ransomware Licensing HIPAA Health Insurance 98

HIPAA Journal

OCTOBER 11, 2022

The post Email Breaches Reported by Cardiac Imaging Associates & Centerstone of Tennessee appeared first on HIPAA Journal. It was not possible to determine if any emails or file attachments were opened or acquired by the attacker.

Licensing 75

Licensing HIPAA Health Insurance Medicaid 75

Healthcare IT News - Telehealth

OCTOBER 20, 2021

Early on in the pandemic, the Centers for Medicare & Medicaid Services (CMS) extended telehealth waivers that helped bring virtual care services into the mainstream. From that point forward, all health systems will need to have a HIPAA-compliant solution at the ready.

COVID-19 184

COVID-19 Hospitals Telemedicine Licensing 184