French Hospital Staff Turn to Pen and Paper after Ransomware Attack
The staff of a 1,300-bed hospital in France ditched computers and took to pencil and paper to run daily affairs after a ransomware attack bricked…
Missouri Health System Suffers Ransomware Attack
On September 21, 2019, Saint Francis became aware that the computer network that Ferguson Medical Group, LP (FMG) utilized prior to being acquired by Saint…
Tens of Thousands of TennCare and Florida Blue Members Impacted by Phishing Attack on Business Associate
Further healthcare organizations have confirmed they have been affected by a data breach at Magellan Health National Imaging Associates, a business associate of several HIPAA-covered…
OCR Imposes a $1.6 Million Civil Money Penalty against Texas Health and Human Services Commission for HIPAA Violations
The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) has imposed a $1,600,000 civil money penalty against the…
Pennsylvania CNA Accused of Taking Photos of Dead Residents and Sending Them to Friends and Co-Workers
A former worker at a Berks County nursing home was arrested after she allegedly took photos of deceased residents and then sent them to her…
Failure to Encrypt Mobile Devices Leads to $3 Million HIPAA Settlement
The University of Rochester Medical Center (URMC) has agreed to pay $3 million to the Office for Civil Rights (OCR) at the U.S. Department of…
ONC Health IT Update: Download the Latest Version of the SRA Tool
ONC and the Office for Civil Rights (OCR) are proud to announce the release of version 3.1 of the Security Risk Assessment (SRA) Tool. First…
OCR Imposes a $2.15 Million Civil Money Penalty against Jackson Health System for HIPAA Violations
The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services has imposed a civil money penalty of $2,154,000 against Jackson…
Data Breach at Montana Hospital May Have Affected 129,000 Patients’ Personal Information
Kalispell Regional Healthcare (KRH) is mailing letters to nearly 130,000 patients whose personal information may have been involved in a data breach over the summer.
Would a Unique Patient Identifier Increase the Risk to Patient Privacy?
For several years, industry stakeholders have been making the case for a unique patient identifier to improve patient safety through the correct identification of individuals…