462,000 Blue Cross Blue Shield of Montana Clients Affected By Business Associate Data Breach
Roughly 462,000 present and former customers of Blue Cross Blue Shield of Montana (BCBSMT) were affected by a [...]
Articles by Thomas Brown
Nurse Fired for Disclosing Pregnancy Status of Teenage Patient to a Family Member
An Iowa nurse was dismissed from work for a HIPAA violation. She also lost her unemployment benefits because [...]
Harris Health Patient Records Involved in 10-Year Insider Data Breach
Harris Health, based in Texas, recently began sending notifications to over 5,000 patients about the [...]
NYS DOH to Enforce Cybersecurity Regulation on General Hospitals
The New York State Department of Health (DOH) will implement cybersecurity regulation 10 NYCRR 405.46, which [...]
23andMe $30M Settlement Fund to Resolve Data Breach Lawsuit
23andMe decided to resolve a class action lawsuit that was related to a breach of customer records in 2023. [...]
R1 RCM & Dignity Health Resolves Data Breach Lawsuit for $675,000
R1 RCM Inc. and Dignity Health in Henderson, Nevada agreed to settle a class action data breach lawsuit for [...]
More Than 1.2 Million Absolute Dental Patients Affected by Data Breach
Absolute Dental, a Nevada dental practice with about 50 clinics in Carson City, Minden, Las Vegas, Sparks, [...]
Mount Sinai Health System Pays $5.3 Million to Settle Web Tracking Litigation
HIPAA-covered entity, Mount Sinai Health System, New York City’s largest hospital network, has decided [...]
The Christ Hospital Resolves Pixel Litigation for $2 Million
The Christ Hospital in Cincinnati, Ohio, has consented to pay around $7 million to resolve a consolidated [...]
Oracle Health/Cerner Data Breach Impacted At Least 14,485 Individuals
Oracle Health (earlier known as Cerner Corporation) has not reported the number of individuals affected by [...]
Family Health Center Settles Class Action Data Breach for $850,000
Michigan healthcare provider, Family Health Center, located in three areas in Kalamazoo, has consented to [...]
10% More Data Breaches Reported But With Lower Victim Count
According to Identity Theft Resource Center (ITRC), 2025 will likely be another record-breaking year in terms [...]
Lake Charles Memorial Health Settles Data Breach Lawsuit for $2 Million
The court has given preliminary approval to a $2 million settlement to resolve a class action litigation [...]
Texas Court Overturns Abortion Privacy Ruling
A Texas Judge decided that the update on the HIPAA Privacy Rule released by the U.S. Department of Health and [...]
East Carolina Health Pays $250,000 to Resolve Data Leak Lawsuit
The settlement of a class action lawsuit against East Carolina Health (EC Health) has been accepted. The [...]
Hunters International Ransomware Group Gives Free Decryptor After Being Shut Down
The Hunters International threat group reported the shutdown of its operation and stated that it will publish [...]
Texas Governor Approves Cybersecurity Safe Harbor Law for SMBs
The Texas state government is protecting small businesses in Texas from data breach lawsuits liability as [...]
Episource LLC Healthcare Clients Affected by Ransomware Attack
Episource LLC provides healthcare providers and health plans with software solutions, medical coding, and [...]
Jackson Health System Second Experience of a 5-Year Insider Data Breach
Jackson Health System recently reported an insider data breach and theft of the protected health information [...]
New HHS’ Office for Civil Rights Director Paula M. Stannard
Paula M. Stannard worked at the Montana Department of Public Health and Human Services as the former Chief [...]
New NIST Metric for Forecasting Likelihood of Vulnerability Exploitation
Patching software to resolve identified vulnerabilities is a never-ending process and is important for [...]
Coastal Orthopedics Pays $1.4 Million to Resolve Data Breach Lawsuit
HIPAA-covered entity Coastal Orthopedics & Sports Medicine of Southwest Florida (COSM) decided to resolve [...]
NeuroSav Sends Breach Notifications to Hacking Incident Victims
Georgia’s Neurological Institute of Savannah & Center for Spine (NeuroSav) reported a data breach [...]
Pixmeo OsiriX MD DICOM Viewer Found to Have Three Vulnerabilities
Pixmeo OsiriX MD is the most popular DICOM medical image viewer in the world. Recently, the company [...]
City of Long Beach Cyberattack in November 2023 Impacts 470,060 Individuals
Present and former residents of City of Long Beach in California found out after more than one year that [...]
Dameron Hospital Will Pay $650,000 to Resolve Class Action Data Breach Lawsuit
Dameron Hospital in California has consented to pay $650,000 to resolve a lawsuit as a result of a [...]
Impermissible Disclosure of Blue Shield of California Members’ PHI to Google Ads
Blue Shield of California, a medical insurance plan company, reported a privacy breach involving web trackers [...]
Policy Secure, Ivanti Connect Secure, and ZTA Gateways Vulnerabilities Detected
A recent advisory from the U.S. Cybersecurity and Infrastructure Security Agency (CISA) indicates that a [...]
Azura Vascular Care to Pay $3.15 Million to Settle Data Breach Lawsuit
Fresenius Vascular Care, Inc., also called Azura Vascular Care, agreed to settle a class action lawsuit. [...]
OCR Conducts Third Phase of HIPAA Compliance Audits
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has announced the [...]
Nebraska Approves the Law that Shields Companies from Class Action Liability
On March 17, 2025, Legislative Bill 241 has been approved after Nebraska Governor Jim Pillen signed the law. [...]
RIPTA to Resolve Ransomware Attack Lawsuit with $350,000 Settlement Fund
Rhode Island Public Transit Authority (RIPTA) agreed to settle a lawsuit associated with a ransomware attack [...]
Vulnerabilities Found in Blood Glucose Monitoring Android App of Dario Health
Dario Health found seven vulnerabilities in its Android app and web-based server infrastructure. An attacker [...]
Arietis Health Pays $2.8 Million to Resolve MOVEit Data Breach Lawsuit
Arietis Health agreed to a $2.8 million settlement to resolve a class action lawsuit associated with a [...]
Deadline Announced for Filing Motions to Dismiss in Change Healthcare Data Breach Lawsuits
A District Court Judge has set the due date in March 2025 for Change Healthcare to submit motions to dismiss [...]
$5 Million Deloitte Fund to Cover Rhode Island Ransomware Attack Expenses
Rhode Island Governor Dan McKee has reported Deloitte’s decision to pay the state of Rhode Island $5 [...]
Chainalysis’ Reports Upsurge in Ransomware Attacks in 2024 but Less Ransom Payments
A blockchain analysis indicates a growing unwillingness to pay ransomware groups. Chainalysis’ new [...]
New York Blood Center Enterprises Confirms Data Breach
New York Blood Center Enterprises (NYBCe), another U.S. blood donation company, encountered a ransomware [...]
New Acting HHS Secretary Appointment
President Trump gave Dr. Dorothy Fink the new Acting Secretary of the Department of Health and Human Services [...]
PHI of 3.4 Million Wolf Haldenstein Clients Exposed
Adler Freeman & Herz LLP (Wolf Haldenstein) in New York City has experienced a serious data breach [...]
MU Health Care Settles Data Breach Lawsuit for $8 Million
University of Missouri Health Care (MU Health Care) has decided to pay $8 million to settle a class action [...]
Brain Cipher Ransomware Group Starts Leaking Stolen Data from RI Bridges
The Brain Cipher ransomware group that claimed to be responsible for the cyberattack on the online health and [...]
HHS Asks Health Industry to Boost OT & IoMT Security
The Department of Health and Human Services (HHS) asks healthcare providers to take the appropriate measures [...]
5.6 Million Patients Affected by Ascension Ransomware Attack
In May 2024, Ascension Health encountered a ransomware attack, but it took to identify the number of people [...]
Democratic Senators Introduce Health and Location Data Protection Act of 2024
A new bill was presented in the Senate that could stop data brokers from using unfair and deceitful acts and [...]
Illegal Access of Medical Records Committed by an Organ Transplant Coordinator
In July 2024, a federal jury pronounced Trent James Russell guilty for illegally accessing the medical [...]
UMC Health Confirms September Ransomware Attack and Notifies Impacted Patients
UMC Health System began informing patients about the exposure of some of their protected health information [...]
Change Healthcare’s Clearinghouse Services Available Now After the February Ransomware Attack
Change Healthcare has reported the complete restoration of its clearinghouse services after encountering a [...]
Updated Security Risk Assessment Tool Released by OCR
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) presently has an enforcement [...]
1.8 Million Individuals Impacted by Ransomware Attack on Summit Pathology
Summit Pathology Laboratories, Inc. based in Colorado reported a data breach to the HHS’ Office for Civil [...]
161K-Record Data Breach Reported by Long Island Plastic Surgical Group
New York-based Long Island Plastic Surgical Group reported a hacking incident to the HHS’ Office for Civil [...]
HHS Faces Lawsuit to Stop the Reproductive Health Care Privacy Rule Enforcement
The Office for Civil Rights (OCR), OCR Director Melanie Fontes Rainer, the Department of Health and Human [...]
OCR Imposes $70,000 Civil Monetary Penalty on Gums Dental Care for HIPAA Right of Access Violation
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) reported the 9th [...]
Supreme Court Declines Biden Administration’s Appeal in Texas Emergency Abortion Case
The Supreme Court refused to review the Biden Administration’s appeal seeking to reverse a lower court [...]
New Cybersecurity Standards Proposed for Healthcare with Stricter Enforcement
Two Democratic Senators have proposed legislation to strengthen cybersecurity in the healthcare sector by [...]
Learning From the Change Healthcare Attack and Steps to Prevent Future Breaches
The attack on Change Healthcare has become a cautionary tale, prompting healthcare organizations to [...]
76,000 Individuals Affected by Richland County, WI October 2023 Cyberattack
Richland County, Wisconsin is informing 76,365 people about a data breach involving their protected health [...]
$55.5 Billion Losses Reported from BEC Attacks
The Federal Bureau of Investigation (FBI) published an alert to businesses concerning the growing threat of [...]
McLaren Health Care IT Systems Now Restored After the Ransomware Attack
McLaren Health Care has reported the successful restoration of all IT systems impacted by the ransomware [...]
Guidance Pushes for Secure by Design Software
Software vendors are being targeted by cybercriminals and nation-state threat actors. In a successful attack [...]
Why a Federal Privacy Law is Necessary with the Advancement of AI
Senate Committee on Commerce, Science and Transportation Chair Maria Cantwell (D-WA) led a committee hearing [...]
19,150 Medicaid Members Impacted by Disability Rights Wisconsin Data Breach
Wisconsin Department of Health Services (DHS) has submitted a breach report involving the potential exposure [...]
ComplianceJunction HIPAA Training Course Accredited by AHIMA
The market leading healthcare training company ComplianceJunction has announced that its HIPAA Training for [...]
10 Examples of HIPAA Violations on Social Media
A benefit of including examples of HIPAA violations on social media in HIPAA training is so members of the [...]
Microsoft Outlook HIPAA Compliance
For users of Microsoft Outlook, HIPAA compliance consists of subscribing to a suitable plan, agreeing to the [...]
WhatsApp and HIPAA Compliance
When discussing WhatsApp and HIPAA compliance, it is important to be aware of the occasions when WhatsApp can [...]
What is the maximum penalty for a HIPAA violation?
The maximum penalty for a HIPAA violation depends on the type and severity of the violation. The Department [...]
WV Healthcare Providers & NJ Medical Billing Administrator Report Data Breaches
It was recently revealed that Charleston Area Medical Center (CAMC) was infiltrated by a cyberattack where [...]
22,000-Record Data Breach Results in RI Attorney General Subpoenas for RIPTA and UnitedHealthcare
An investigation is being conducted by the Rhode Island Attorney General into the UnitedHealthcare and the [...]
University of Arkansas for Medical Sciences & Sacramento County Report Two Breaches
The University of Arkansas for Medical Sciences (UAMS) and Sacramento County have both recently reported [...]
Criminal HIPAA Violation for Former Huntington Hospital Employee
After accessing 12,925 patient records with permission, a former worker at Huntington Hospital in New York [...]
19,000 Individuals Made Aware that Breaches at University Hospital Newark May have Impacted their PHI
It has been discovered that the protected health information of thousands of patients of University Hospital [...]
Tens of Thousands of Professional Dental Alliance Patients Impacted in Phishing Attack on Business Associate
A group of dental clinics practices affiliated with the North American Dental Group, Professional Dental [...]
PHI Compromised in June Cyberattack on University Medical Center of Southern Nevada
An update has been released in relation to the University Medical Center of Southern Nevada (UMC) cyberattack [...]
Northwestern Memorial HealthCare and Renown Health Affected by Elekta Cyberattack
A cyberattack on a business associate of Chicago, IL-based Northwestern Memorial HealthCare and Reno, [...]
20/20 Hearing Care Network Data Breach Impacts over 3.2 Million People
Following the discovery of suspicious activity on their databases, the 20/20 Hearing Care Network has begun [...]
$40,000 Privacy Breach Penalty for Adventist Health Physicians Network
Simi Valley, California based Adventist Health Physicians Network has been directed to hand over $40,000 [...]
Healthcare Cyberattacks Doubled in 2020 According to IBM X-Force
An IBM X-Force report has revealed that the amount of healthcare cyberattacks doubled in 2020 with 28% of [...]
Privacy and Security of COVID-19 to be Protected by Public Health Emergency Privacy Act
Democratic senators introduced the Public Health Emergency Privacy Act on January 28, 2021 in order to [...]
51% Growth in Healthcare Industry Web Application Attacks During December
According to new research published by cybersecurity firm Imperva, there has been a major rise in healthcare [...]
Cyberattack on AspenPointe Affects 295,000
AspenPointe, based in Colorado Springs has revealed that it was impacted by a cyberattack during September [...]
Cybersecurity Impact of COVID-19 on Working Environment Explored in Survey
Before the COVID-19 pandemic the majority of businesses permitted a portion of the workforce to dedicate some [...]
MHealth App Developers and Cloud Services Providers have New Resources made Available by OCR
The Department of Health and Human Services’ Office for Civil Rights has revealed that it has made [...]
Lack of Encryption & Other HIPAA Flaws Leads to $1m HIPAA Penalty
The HHS’ Office for Civil Rights has sanctioned a $1,040,000 HIPAA fine on Lifespan Health System [...]
CVS Pharmacy and Walgreens Break-ins Compromises PHI
CVS Pharmacy is contacting some patients to inform them that some of their personal and protected health [...]
Two Recent Cyberattacks Result in $107,000 Stolen from Kentucky Employees’ Health Plan Members
The Commonwealth of Kentucky Personnel Cabinet has revealed that two data breaches took place between late [...]
Nigerian BEC Scammers Target Government Healthcare Agencies & COVID-19 Research Organizations
Business email compromise actors working out of Nigeria have been targeting government healthcare agencies, [...]
OCR Issues Guidance in relation to Filming and Access to Healthcare Facilities
The HHS’ Office for Civil Rights (OCR) has released a directive for healthcare providers to follow which [...]
82% of Public-Facing Exchange Servers Remain Susceptible to Actively Exploited Critical Vulnerability
On February Patch Tuesday, 2020, Microsoft made a patch available to address a critical vulnerability [...]
Hartford Healthcare and Saint Francis Ministries Suffer Phishing Attacks
The Saint Francis Ministries health system has revealed that the email account of one of its staff members [...]
Andrews Braces Hack May Have Compromised PHI of 16,600 Patients
The Sparks, NV orthodontics practice, Andrews Braces, has said that a ransomware attack took place on [...]
More than 113,000 Patients of Brandywine Urology Consultants Ransomware Attack
Delaware-based Brandywine Urology Consultants has made public that it suffered a ransomware attack on January [...]
COVID-19 Crisis: OCR Publishes Allowable Disclosures of PHI to First Responders
The U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) has made available [...]
COVID19 Pandemic Leads to Huge Spike in Cyber-Attacks Targeting WHO
An attorney for New York-based cybersecurity experts Blackstone Law Group has discovered that the World [...]
Coronavirus Pandemic: OCR Publishes Guidance on Telehealth and HIPAA
HHS’ Office for Civil Rights (OCR) has released guidance on telehealth and remote communications. This [...]
Webinar 03/18/20: Discover the Untold Benefits of HIPAA Compliance
If you are a HIPAA-covered organisation, exiting associate, or you hope to begin providing services to [...]
Healthcare Worker Arraigned on 430 Counts Following Criminal HIPAA Violation
A previous staff member of ACM Global Laboratories, part of Rochester Regional Health, has been accused of [...]
Healthcare Data Breach Report for January 2020 Published
The Department of Health and Human Services’ Office for Civil Rights were inundated during January with [...]
2018 Phishing Attack Impacted more Quest Health Systems Discovers Patients than First Thought
Health Quest, which is now an entity of Nuvance Health, has discovered the phishing attack impacted its [...]
SouthEast Eye Specialist Group Phishing Impacts 13,000 Patients
SouthEast Eye Specialist (SEES) Group located in Franklin, TN, is contacting 13,000 patients to make them [...]
ComplianceHome is a registered trademark. Copyright © 2025 ComplianceHome. All rights reserved.