HHS OCR Settles Malicious Insider Cybersecurity Investigation for $4.75 Million
Today, the US Department of Health and Human Services (HHS), Office for Civil Rights (OCR), announced a settlement with Montefiore Medical Center, a non-profit hospital system based in New York…
Read More »
314,000 Patients Affected by Cyberattack on New Jersey Health System
CompleteCare Health Network, a health system serving patients in southern New Jersey, has recently confirmed that the protected health information of 313,973 patients has potentially been compromised in an October…
Read More »Possible Threat of Unauthorized Access to HPH Organizations from Remote Access Tool
Security researchers are warning that Healthcare and Public Health (HPH) organizations that use the remote access tool ScreenConnect could be adversely affected or targeted by threat actors. The impact of…
Read More »Merck Reaches Settlement with Insurers over $1.4 Billion NotPetya Malware Attack
The Pharmaceutical giant Merck has finally obtained a settlement with its insurance policy providers over a June 2017 cyberattack that Merck claimed resulted in $1.4 billion in damages.
Read More »
Novant Health Reaches $6.6M Settlement over Improper PHI Disclosures
Novant Health agreed to pay $6.6 million to settle a class action lawsuit surrounding improper disclosures of protected health information (PHI) due to the health system’s use of third-party tracking…
Read More »
NY AG Reaches Agreement with Healthcare Provider to Invest $1.2M to Protect Patient Data
New York Attorney General Letitia James today announced an agreement with a Hudson Valley-area healthcare provider, Refuah Health Center, Inc. (Refuah), for failing to safeguard the personal and private health…
Read More »
More Than 911,000 Individuals Affected by Ambulance Service Data Breach
Legal counsel for Transformative Healthcare, a Newton MA-based medical, transportation & logistics company, has notified the Maine Attorney General about a data breach that has affected 911,757 individuals.
Read More »Massachusetts Hospital IT Systems, EHR Affected by Cyberattack
Anna Jaques Hospital in Newburyport, Mass., took its computer system and EHR offline after identifying a cyberattack Dec. 24, according to The Daily News.
Read More »
Second Corewell Health Data Breach Exposes Info of One Million Michigan Patients
A cybersecurity breach at HealthEC, LLC, a population health management platform that provides services to Corewell Health’s southeastern Michigan properties, has reportedly affected more than one million Michigan residents, Attorney…
Read More »NY AG Secures $300K from NewYork-Presbyterian Hospital for Failing to Protect Patient Data
New York Attorney General Letitia James today secured $300,000 from The NewYork-Presbyterian Hospital (NYP) for disclosing the health information of individuals who visited their website. An investigation by the Office…
Read More »