Iowa Company Faces Lawsuit over Massive Health-Data Cyberattack
A Des Moines company is facing a potential class action lawsuit over an alleged cyberattack that may have exposed the health data of 1.6 million…
HHS OCR Settles HIPAA Security Rule Investigation with Illinois Treatment Center
Today, the US Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) announced a settlement with Top of the World Ranch Treatment…
OCR Announces Civil Enforcement Program for Confidentiality of SUD Patient Records
The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a new program to implement and enforce statutory and regulatory…
Records of over 300K People Accessed in Department of Human Services Data Breach
The Minnesota Department of Human Services (DHS) announced that the demographic records of over 300,000 individuals were accessed in a data breach involving MnCHOICES in…
HHS OCR Update: System Hardening and Protecting ePHI
System hardening is the process of customizing electronic information systems (e.g., computer systems and other electronic devices) to reduce their attack surface, thus reducing the…
Nearly Half a Million Patients Exposed in Healthcare Breach — Here’s What We Know
The May 2025 cyberattack affecting Covenant Health is now understood to be a lot more destructive than initially thought, as the number of affected people…
HHS OCR Settles HIPAA Right of Access Investigation with Concentra, Inc.
Today, the US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Concentra, Inc., an occupational health services…
NH AG Sues Healthcare Firms for Patient Abandonment, Receiver to Oversee Records
Attorney General John M. Formella announces that the Department of Justice (DOJ) has filed a Complaint in Rockingham County Superior Court alleging unfair business practices,…
HHS OCR Presents: The HIPAA Security Rule—Risk Management
The HHS Office for Civil Rights (OCR) is producing a pre-recorded video for HIPAA covered entities and business associates (collectively, “regulated entities”) reviewing the requirements…
Oracle Breach Hits Another Health System
Newark, Del.-based ChristianaCare is the latest health system to confirm it was affected by a cybersecurity incident involving its EHR vendor, Oracle Health, formerly known…