Rhysida Leaks Nursing Home Data, Demands $1.5M from Axis
Ransomware gang Rhysida is threatening to dump data on the dark web that belongs to a Colorado provider of mental health, substance abuse and other healthcare services unless it pays…
Read More »Email Account Breaches Reported by Four HIPAA Covered Entities
Four HIPAA-covered entities have recently reported breaches of their email environments: Southern Bone & Joint Specialists in Mississippi, Connally Memorial Medical Center in Texas, Rim Country Health and Rehabilitation in…
Read More »HHS OCR Imposes $240K Civil Monetary Penalty in HIPAA Ransomware Cybersecurity Investigation
The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a $240,000 civil monetary penalty against Providence Medical Institute in Southern California, concerning potential violations…
Read More »HHS OCR Settles Ransomware Cybersecurity Investigation under HIPAA Security Rule for $250K
Today, the US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Cascade Eye and Skin Centers, PC, a privately-owned healthcare provider in…
Read More »CMS Notifies Individuals Potentially Impacted by Data Breach
The Centers for Medicare & Medicaid Services (CMS) and Wisconsin Physicians Service Insurance Corporation (WPS) are notifying people whose protected health information or other personally identifiable information (PII) may have…
Read More »HIPAA Security Rule Facility Access Controls – What are they and how do you implement them?
In today’s environment of increased cyber-attacks and breaches of electronic protected health information (ePHI) caused by hacking, malware, or ransomware, HIPAA covered entities and business associates (collectively, “regulated entities”) may…
Read More »Data Breach Exposes Personal and Medical Information of Nearly 77,000 Patients
An Ohio nursing home company is notifying approximately 77,000 individuals that their personal and medical information was compromised in a data breach that dates back to October 2023.
Read More »Ransomware Strikes McLaren Health Care Again
McLaren Health Care confirmed that its Aug. 6 IT disruption was the result of a ransomware attack, which, according to an Aug. 16 update on the health system’s website, is…
Read More »Cardiology Practice: Hack Affected 281,000 Patients, Docs
An Alabama cardiology practice is notifying nearly 281,000 current and past patients, physicians and employees that hackers stole their sensitive information.
Read More »NJ AG and Multistate Coalition Secure $4.5M from Enzo Biochem for Failing to Protect Health Data
Attorney General Matthew J. Platkin and the Attorneys General of New York and Connecticut today secured $4.5 million from Enzo Biochem, Inc., for failing to adequately safeguard the personal and…
Read More »