Rhysida Leaks Nursing Home Data, Demands $1.5M from Axis

Ransomware gang Rhysida is threatening to dump data on the dark web that belongs to a Colorado provider of mental health, substance abuse and other healthcare services unless it pays…

Read More »

Email Account Breaches Reported by Four HIPAA Covered Entities

Four HIPAA-covered entities have recently reported breaches of their email environments: Southern Bone & Joint Specialists in Mississippi, Connally Memorial Medical Center in Texas, Rim Country Health and Rehabilitation in…

Read More »

HHS OCR Imposes $240K Civil Monetary Penalty in HIPAA Ransomware Cybersecurity Investigation

The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a $240,000 civil monetary penalty against Providence Medical Institute in Southern California, concerning potential violations…

Read More »

HHS OCR Settles Ransomware Cybersecurity Investigation under HIPAA Security Rule for $250K

Today, the US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Cascade Eye and Skin Centers, PC, a privately-owned healthcare provider in…

Read More »

CMS Notifies Individuals Potentially Impacted by Data Breach

The Centers for Medicare & Medicaid Services (CMS) and Wisconsin Physicians Service Insurance Corporation (WPS) are notifying people whose protected health information or other personally identifiable information (PII) may have…

Read More »

HIPAA Security Rule Facility Access Controls – What are they and how do you implement them?

In today’s environment of increased cyber-attacks and breaches of electronic protected health information (ePHI) caused by hacking, malware, or ransomware, HIPAA covered entities and business associates (collectively, “regulated entities”) may…

Read More »

Data Breach Exposes Personal and Medical Information of Nearly 77,000 Patients

An Ohio nursing home company is notifying approximately 77,000 individuals that their personal and medical information was compromised in a data breach that dates back to October 2023.

Read More »

Ransomware Strikes McLaren Health Care Again

McLaren Health Care confirmed that its Aug. 6 IT disruption was the result of a ransomware attack, which, according to an Aug. 16 update on the health system’s website, is…

Read More »

Cardiology Practice: Hack Affected 281,000 Patients, Docs

An Alabama cardiology practice is notifying nearly 281,000 current and past patients, physicians and employees that hackers stole their sensitive information.

Read More »

NJ AG and Multistate Coalition Secure $4.5M from Enzo Biochem for Failing to Protect Health Data

Attorney General Matthew J. Platkin and the Attorneys General of New York and Connecticut today secured $4.5 million from Enzo Biochem, Inc., for failing to adequately safeguard the personal and…

Read More »