Ransomware Attack Prompts Maryland Hospital to Take Systems Offline
A ransomware attack forced a Maryland hospital to take its systems offline, causing some delays, though most appointments are still scheduled, according to a Jan.…
294,000 Allegheny Health Network Patients Affected by Business Associate Cyberattack
Allegheny Health Network (AHN), a Pittsburgh-based 14-hospital academic medical system, has announced a significant data breach involving unauthorized access to patient data at one of…
Iowa Doctor Jailed for HIPAA Violations
An Iowa emergency room doctor and medical resident, who violated the Health Insurance Portability and Accountability Act (HIPAA) by viewing the medical records of multiple…
HHS OCR Settles HIPAA Case Against Healthcare System over Patient Access to Records
The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with South Broward Hospital District d/b/a Memorial Healthcare…
HHS OCR Settles HIPAA Ransomware Cybersecurity Investigation for $10,000
The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Northeast Surgical Group, PC (NESG), a provider…
HHS OCR Settles HIPAA Phishing Cybersecurity Investigation for $3 Million
The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Solara Medical Supplies, LLC (Solara), a supplier…
Hackers Target Ohio Long-Term Care Facilities
A data breach has exposed personal details — including Social Security numbers and medical information — for residents of three Erie County long-term care facilities.
CISA Releases the Cybersecurity Performance Goals Adoption Report
On January 10, CISA released the Cybersecurity Performance Goals Adoption Report to highlight how adoption of Cybersecurity Performance Goals (CPGs) benefits our nation’s critical infrastructure…
OCR Settles HIPAA Security Rule Investigation Concerning the Deletion of ePHI
The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a $337,750 settlement with USR Holdings, LLC, a business associate…
OCR Settles 9th Ransomware Investigation with Virtual Private Network Solutions
The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a $90,000 settlement with Virtual Private Network Solutions, LLC (VPN…