Upstate New York Nonprofit Hospitals Still Facing Issues after LockBit Ransomware Attack

Two major hospitals serving thousands in upstate New York are struggling to recover from cyberattacks that were announced last week.

Read More »

California AG Announces $49M Settlement with Kaiser for Illegal Disposal of Waste and PHI

In partnership with six district attorneys, California Attorney General Rob Bonta announced a settlement with Kaiser Foundation Health Plan, Inc., and Kaiser Foundation Hospitals (collectively “Kaiser”) resolving allegations that the…

Read More »

HHS OCR Settles with LA Care Health Plan over Potential HIPAA Security Rule Violations

Today, the US Department of Health and Human Services’ Office for Civil Rights (OCR) announced a settlement of potential violations of the Health Insurance Portability and Accountability Act (HIPAA) Rules…

Read More »

Joint Commission Issues Alert on Patient Safety after a Cyberattack

On August 15, 2023, the Joint Commission issued a Sentinel Event Alert entitled “Preserving patient safety after a cyberattack,” which provides “tips on what organizations can do to prepare to…

Read More »

Increasingly Common, Healthcare Cyberattacks Now Even Target Patients with Ransom

McLaren Health Care said it shut down the computer network at its 14 Michigan hospitals last week “out of an abundance of caution” after its information technology security team found…

Read More »

HHS Security Risk Assessment Tool Version 3.4 and Webinars

The Office for Civil Rights (OCR) and the Office of the National Coordinator for Health Information Technology (ONC) at the US Department of Health and Human Services (HHS) are hosting…

Read More »

UnitedHealthcare Pays $80K Settlement to HHS to Resolve HIPAA Matter over Medical Records Request

Today, the Office for Civil Rights (OCR) at the US Department of Health and Human Services (HHS) has announced a settlement with UnitedHealthcare Insurance Company (“UHIC”), a health insurer that…

Read More »

Morris Hospital & Healthcare Centers Notifies Almost 249K Patients about April Cyberattack

Morris Hospital & Healthcare Centers in Illinois has started notifying 248,943 individuals about a cyberattack that was detected on April 4, 2023.

Read More »

Dallas Ransomware Attack Tally Rises to 30,253 People as HHS Opens Investigation

The city of Dallas has reported 30,253 people had their personal information compromised as a result of a ransomware attack — a jump of more than 4,000 from what the…

Read More »

HCA Healthcare Provides Substitute Notice to Certain Patients about Previously Disclosed Data Security Incident

HCA Healthcare, one of the nation’s leading healthcare providers which, through its affiliates, operates 182 hospitals and 2,300+ sites across 20 states, announced on August 14, 2023, that notification letters…

Read More »