Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates

The Office for Civil Rights (OCR) at the US Department of Health and Human Services (HHS) is issuing this Bulletin to highlight the obligations of Health Insurance Portability and Accountability…

Read More »

HHS Proposes New Protections for Patients with Substance Use Challenges

The US Health and Human Services Department, through the Office for Civil Rights (OCR) and the Substance Abuse and Mental Health Services Administration (SAMHSA), announced proposed changes to the Confidentiality…

Read More »

NewYork-Presbyterian Hospital Notifies 12K of Healthcare Data Breach

NewYork-Presbyterian (NYP) Hospital notified approximately 12,000 patients of a breach that occurred in September 2022.

Read More »

Five Former Tennessee Hospital Employees Charged with HIPAA Violations

A federal grand jury has indicted five former Methodist Hospital Employees for conspiring with Roderick Harvey, 40, to unlawfully disclose patient information in violation of the Health Insurance Portability and…

Read More »

Michigan Medicine Notifies 33K Patients of Phishing Attack

Michigan Medicine notified 33,850 patients of a phishing attack that may have exposed their health information after a cyber attacker targeted them with a scam that lured employees to a…

Read More »

Hospital Staff Shared Unauthorized Photos of Dying Patient on Social Media

While trying to cope with his 18-year-old son’s death, Jose Lopez was informed by HCA Florida Kendall Hospital that an emergency room worker had posted a photo on social media…

Read More »

HIPAA Security Rule Security Incident Procedures

Every October, in recognition of National Cybersecurity Awareness Month, the federal government and its partners work to educate stakeholders on cybersecurity awareness and how best to protect the privacy and…

Read More »

NM Radiology Practice Health Data Breach Results in PHI Exposure

Radiology Associates of Albuquerque, also known as RAA Imaging, informed an undisclosed number of patients of a health data breach involving protected health information (PHI) exposure.

Read More »

Health System Data Breach Due to Meta Pixel Hits 3 Million Patients

Advocate Aurora Health (AAH), a 26-hospital healthcare system in Wisconsin and Illinois, is notifying its patients of a data breach that exposed the personal data of 3,000,000 patients.

Read More »

White House Sets Sights on New Healthcare Cybersecurity Standards

New healthcare cybersecurity standards and guidance from the White House are on the horizon, Anne Neuberger, deputy national security advisor for cyber and emerging technology in the Biden Administration, said…

Read More »