HHS OCR Creates FAQ Webpage in Response to the Change Healthcare Cyberattack

The US Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has posted a new webpage to share answers to frequently asked questions (FAQs) concerning the Health…

Read More »

Webinar on the New Final Rule Modifying the Confidentiality Provisions for SUD Patient Records

The US Department of Health and Human Services (HHS) Office for Civil Rights (OCR) and the Substance Abuse and Mental Health Services Administration (SAMHSA) released a webinar recording on the…

Read More »

UnitedHealth to Take up to $1.6 Billion Hit This Year from Change Hack

UnitedHealth Group said on Tuesday it expects the hack of its Change Healthcare unit to cost the company up to $1.6 billion this year but maintained its 2024 earnings forecast.

Read More »

Ransomware Gang Steals 534,000 Records from Wisconsin Healthcare Provider

Hackers stole health records belonging to more than half a million individuals from a non-profit Wisconsin healthcare provider after their attempt to encrypt the organization’s systems failed.

Read More »

HHS OCR Imposes Civil Monetary Penalty on New Jersey Nursing Facility

Today, the US Department of Health and Human Services (HHS), Office for Civil Rights (OCR), announced a $100,000 civil monetary penalty against Essex Residential Care, LLC, doing business as Hackensack…

Read More »

HHS Office for Civil Rights Settles HIPAA Investigation with Phoenix Healthcare

Today, the US Department of Health and Human Services (HHS), Office for Civil Rights (OCR), announced a settlement with Phoenix Healthcare, an Oklahoma multi-facility organization in nursing care. The settlement…

Read More »

Healthcare Providers Sue UnitedHealth Group over Change Healthcare Ransomware Attack

Lawsuits have started to be filed against UnitedHealth Group, Optum Inc., and Change Healthcare by healthcare providers that have been unable to access Change Healthcare’s services due to the shutdown…

Read More »

OCR Updated Guidance on Use of Online Tracking Technologies

On March 18, 2024, OCR revised its guidance on “Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates” to remind regulated entities and the public that the…

Read More »

HHS OCR Issues Letter and Opens Investigation of Change Healthcare Cyberattack

Today, the US Department of Health and Human Services’ Office for Civil Rights (OCR) issued a “Dear Colleague” letter addressing the cybersecurity incident impacting Change Healthcare, a unit of UnitedHealthcare…

Read More »

Patient Data Exposed in Phishing Attack on UC San Diego Health

UC San Diego Health has recently notified the California Attorney General about a phishing attack that was discovered on January 9, 2024, which exposed the sensitive data of patients.

Read More »