Iowa Doctor Jailed for HIPAA Violations

An Iowa emergency room doctor and medical resident, who violated the Health Insurance Portability and Accountability Act (HIPAA) by viewing the medical records of multiple women who were not his…

Read More »

HHS OCR Settles HIPAA Case Against Healthcare System over Patient Access to Records

The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with South Broward Hospital District d/b/a Memorial Healthcare System (Memorial Healthcare System), a…

Read More »

HHS OCR Settles HIPAA Ransomware Cybersecurity Investigation for $10,000

The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Northeast Surgical Group, PC (NESG), a provider of surgical services in Michigan,…

Read More »

HHS OCR Settles HIPAA Phishing Cybersecurity Investigation for $3 Million

The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Solara Medical Supplies, LLC (Solara), a supplier and direct-to-patient distributor of continuous…

Read More »

Hackers Target Ohio Long-Term Care Facilities

A data breach has exposed personal details — including Social Security numbers and medical information — for residents of three Erie County long-term care facilities.

Read More »

CISA Releases the Cybersecurity Performance Goals Adoption Report

On January 10, CISA released the Cybersecurity Performance Goals Adoption Report to highlight how adoption of Cybersecurity Performance Goals (CPGs) benefits our nation’s critical infrastructure sectors. Originally released in October…

Read More »

OCR Settles HIPAA Security Rule Investigation Concerning the Deletion of ePHI

The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a $337,750 settlement with USR Holdings, LLC, a business associate in Florida, under the Health…

Read More »

OCR Settles 9th Ransomware Investigation with Virtual Private Network Solutions

The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a $90,000 settlement with Virtual Private Network Solutions, LLC (VPN Solutions), a Virginia business associate…

Read More »

HHS OCR Settles 8th Ransomware Investigation with Elgon Information Systems

The US Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced an $80,000 settlement with Elgon Information Systems (Elgon), a Massachusetts company that provides electronic medical…

Read More »

HHS OCR Proposes Measures to Strengthen Healthcare Cybersecurity Under HIPAA

On December 27, the US Department of Health and Human Services (HHS), through its Office for Civil Rights (OCR), issued a proposed rule to improve cybersecurity and better protect the…

Read More »