Staten Island University Hospital Agrees to Resolve Business Associate Data Breach Litigation
Staten Island University Hospital has agreed to settle a class action lawsuit related to a January 2024 data [...]
Articles by Thomas Brown
Epic Sues Health Gorilla and its Clients Alleging Improper Record Access
Epic Systems Files Federal Lawsuit Alleging Improper Patient Record Access Through Health Information [...]
Carolina Arthritis Associates Settles Data Breach Lawsuit for $600,000
Carolina Arthritis Associates has decided to resolve a combined class action lawsuit involving a September [...]
Over 300K Individuals’ Data Affected by Minnesota Department of Human Services Data Breach
The Minnesota Department of Human Services (DHS) sent notification to more or less 304,000 individuals [...]
Consulting Radiologists Resolves Class Action Data Breach Litigation for $2.2M
Radiology practice, Consulting Radiologists Ltd., decided to negotiate a class action data breach litigation. [...]
Interim Healthcare of Lubbock Texas Resolves Data Breach Litigation
Falcon Healthcare, also called Interim Healthcare of Lubbock, Texas offers home care and health care [...]
Murfreesboro Medical Clinic Settles Data Breach Litigation Involving Over 559K Patients
Murfreesboro Medical Clinic & SurgiCenter located in Tennessee made a decision to resolve a class action [...]
Group Health Cooperative of South Central Wisconsin Settles Data Breach Lawsuit for $3.5M
Non-profit health plan Group Health Cooperative of South Central Wisconsin decided to settle with its [...]
Concentra Resolves its HIPAA Right of Access Violation for $112,500
Concentra Inc. made a decision to settle an alleged HIPAA Right of Access violation with the U.S. Department [...]
Data Breach at TriZetto Provider Solutions Impacts its Healthcare Company Customers
TriZetto Provider Solutions, a firm owned by Cognizant, that offers revenue management services to medical [...]
Complaint Against HHS Seeking Vacatur of HHS Final Rules Dismissed
On November 24, 2025, the court granted the joint stipulation of dismissal without prejudice submitted by [...]
Rancho Family Medical Group Settles Data Breach Litigation for $315K
Primary care medical group, Rancho Family Medical Group, serving patients around Southern California, faced a [...]
Omni Family Health to Pay $6.5 Million to Settle Class Action Data Breach Lawsuit
Omni Family Health, with its 39 community health centers located in Kings, Kern, Fresno, and Tulare counties [...]
MedQ Settles Class Action Lawsuit Over Ransomware Attack
HIPAA-covered company, MedQ Inc. is a vendor of administrative services to the healthcare industry. Due to a [...]
Conduent Faces Multiple Lawsuits Over 10.5 Million-Record Data Breach
The Conduent data breach that affected over 10.5 million people prompted at least 9 class action lawsuits [...]
Healthcare Employees Fired for Sharing Photographs of Sedated Patients on Social Media
Four staff members of Baptist Health’s Jay Hospital in Florida were dismissed from work for allegedly [...]
462,000 Blue Cross Blue Shield of Montana Clients Affected By Business Associate Data Breach
Roughly 462,000 present and former customers of Blue Cross Blue Shield of Montana (BCBSMT) were affected by a [...]
Nurse Fired for Disclosing Pregnancy Status of Teenage Patient to a Family Member
An Iowa nurse was dismissed from work for a HIPAA violation. She also lost her unemployment benefits because [...]
Harris Health Patient Records Involved in 10-Year Insider Data Breach
Harris Health, based in Texas, recently began sending notifications to over 5,000 patients about the [...]
NYS DOH to Enforce Cybersecurity Regulation on General Hospitals
The New York State Department of Health (DOH) will implement cybersecurity regulation 10 NYCRR 405.46, which [...]
23andMe $30M Settlement Fund to Resolve Data Breach Lawsuit
23andMe decided to resolve a class action lawsuit that was related to a breach of customer records in 2023. [...]
R1 RCM & Dignity Health Resolves Data Breach Lawsuit for $675,000
R1 RCM Inc. and Dignity Health in Henderson, Nevada agreed to settle a class action data breach lawsuit for [...]
More Than 1.2 Million Absolute Dental Patients Affected by Data Breach
Absolute Dental, a Nevada dental practice with about 50 clinics in Carson City, Minden, Las Vegas, Sparks, [...]
Mount Sinai Health System Pays $5.3 Million to Settle Web Tracking Litigation
HIPAA-covered entity, Mount Sinai Health System, New York City’s largest hospital network, has decided [...]
The Christ Hospital Resolves Pixel Litigation for $2 Million
The Christ Hospital in Cincinnati, Ohio, has consented to pay around $7 million to resolve a consolidated [...]
Oracle Health/Cerner Data Breach Impacted At Least 14,485 Individuals
Oracle Health (earlier known as Cerner Corporation) has not reported the number of individuals affected by [...]
Family Health Center Settles Class Action Data Breach for $850,000
Michigan healthcare provider, Family Health Center, located in three areas in Kalamazoo, has consented to [...]
10% More Data Breaches Reported But With Lower Victim Count
According to Identity Theft Resource Center (ITRC), 2025 will likely be another record-breaking year in terms [...]
Lake Charles Memorial Health Settles Data Breach Lawsuit for $2 Million
The court has given preliminary approval to a $2 million settlement to resolve a class action litigation [...]
Texas Court Overturns Abortion Privacy Ruling
A Texas Judge decided that the update on the HIPAA Privacy Rule released by the U.S. Department of Health and [...]
East Carolina Health Pays $250,000 to Resolve Data Leak Lawsuit
The settlement of a class action lawsuit against East Carolina Health (EC Health) has been accepted. The [...]
Hunters International Ransomware Group Gives Free Decryptor After Being Shut Down
The Hunters International threat group reported the shutdown of its operation and stated that it will publish [...]
Texas Governor Approves Cybersecurity Safe Harbor Law for SMBs
The Texas state government is protecting small businesses in Texas from data breach lawsuits liability as [...]
Episource LLC Healthcare Clients Affected by Ransomware Attack
Episource LLC provides healthcare providers and health plans with software solutions, medical coding, and [...]
Jackson Health System Second Experience of a 5-Year Insider Data Breach
Jackson Health System recently reported an insider data breach and theft of the protected health information [...]
New HHS’ Office for Civil Rights Director Paula M. Stannard
Paula M. Stannard worked at the Montana Department of Public Health and Human Services as the former Chief [...]
New NIST Metric for Forecasting Likelihood of Vulnerability Exploitation
Patching software to resolve identified vulnerabilities is a never-ending process and is important for [...]
Coastal Orthopedics Pays $1.4 Million to Resolve Data Breach Lawsuit
HIPAA-covered entity Coastal Orthopedics & Sports Medicine of Southwest Florida (COSM) decided to resolve [...]
NeuroSav Sends Breach Notifications to Hacking Incident Victims
Georgia’s Neurological Institute of Savannah & Center for Spine (NeuroSav) reported a data breach [...]
Pixmeo OsiriX MD DICOM Viewer Found to Have Three Vulnerabilities
Pixmeo OsiriX MD is the most popular DICOM medical image viewer in the world. Recently, the company [...]
City of Long Beach Cyberattack in November 2023 Impacts 470,060 Individuals
Present and former residents of City of Long Beach in California found out after more than one year that [...]
Dameron Hospital Will Pay $650,000 to Resolve Class Action Data Breach Lawsuit
Dameron Hospital in California has consented to pay $650,000 to resolve a lawsuit as a result of a [...]
Impermissible Disclosure of Blue Shield of California Members’ PHI to Google Ads
Blue Shield of California, a medical insurance plan company, reported a privacy breach involving web trackers [...]
Policy Secure, Ivanti Connect Secure, and ZTA Gateways Vulnerabilities Detected
A recent advisory from the U.S. Cybersecurity and Infrastructure Security Agency (CISA) indicates that a [...]
Azura Vascular Care to Pay $3.15 Million to Settle Data Breach Lawsuit
Fresenius Vascular Care, Inc., also called Azura Vascular Care, agreed to settle a class action lawsuit. [...]
OCR Conducts Third Phase of HIPAA Compliance Audits
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has announced the [...]
Nebraska Approves the Law that Shields Companies from Class Action Liability
On March 17, 2025, Legislative Bill 241 has been approved after Nebraska Governor Jim Pillen signed the law. [...]
RIPTA to Resolve Ransomware Attack Lawsuit with $350,000 Settlement Fund
Rhode Island Public Transit Authority (RIPTA) agreed to settle a lawsuit associated with a ransomware attack [...]
Vulnerabilities Found in Blood Glucose Monitoring Android App of Dario Health
Dario Health found seven vulnerabilities in its Android app and web-based server infrastructure. An attacker [...]
Arietis Health Pays $2.8 Million to Resolve MOVEit Data Breach Lawsuit
Arietis Health agreed to a $2.8 million settlement to resolve a class action lawsuit associated with a [...]
Deadline Announced for Filing Motions to Dismiss in Change Healthcare Data Breach Lawsuits
A District Court Judge has set the due date in March 2025 for Change Healthcare to submit motions to dismiss [...]
$5 Million Deloitte Fund to Cover Rhode Island Ransomware Attack Expenses
Rhode Island Governor Dan McKee has reported Deloitte’s decision to pay the state of Rhode Island $5 [...]
Chainalysis’ Reports Upsurge in Ransomware Attacks in 2024 but Less Ransom Payments
A blockchain analysis indicates a growing unwillingness to pay ransomware groups. Chainalysis’ new [...]
New York Blood Center Enterprises Confirms Data Breach
New York Blood Center Enterprises (NYBCe), another U.S. blood donation company, encountered a ransomware [...]
New Acting HHS Secretary Appointment
President Trump gave Dr. Dorothy Fink the new Acting Secretary of the Department of Health and Human Services [...]
PHI of 3.4 Million Wolf Haldenstein Clients Exposed
Adler Freeman & Herz LLP (Wolf Haldenstein) in New York City has experienced a serious data breach [...]
MU Health Care Settles Data Breach Lawsuit for $8 Million
University of Missouri Health Care (MU Health Care) has decided to pay $8 million to settle a class action [...]
Brain Cipher Ransomware Group Starts Leaking Stolen Data from RI Bridges
The Brain Cipher ransomware group that claimed to be responsible for the cyberattack on the online health and [...]
HHS Asks Health Industry to Boost OT & IoMT Security
The Department of Health and Human Services (HHS) asks healthcare providers to take the appropriate measures [...]
5.6 Million Patients Affected by Ascension Ransomware Attack
In May 2024, Ascension Health encountered a ransomware attack, but it took to identify the number of people [...]
Democratic Senators Introduce Health and Location Data Protection Act of 2024
A new bill was presented in the Senate that could stop data brokers from using unfair and deceitful acts and [...]
Illegal Access of Medical Records Committed by an Organ Transplant Coordinator
In July 2024, a federal jury pronounced Trent James Russell guilty for illegally accessing the medical [...]
UMC Health Confirms September Ransomware Attack and Notifies Impacted Patients
UMC Health System began informing patients about the exposure of some of their protected health information [...]
Change Healthcare’s Clearinghouse Services Available Now After the February Ransomware Attack
Change Healthcare has reported the complete restoration of its clearinghouse services after encountering a [...]
Updated Security Risk Assessment Tool Released by OCR
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) presently has an enforcement [...]
1.8 Million Individuals Impacted by Ransomware Attack on Summit Pathology
Summit Pathology Laboratories, Inc. based in Colorado reported a data breach to the HHS’ Office for Civil [...]
161K-Record Data Breach Reported by Long Island Plastic Surgical Group
New York-based Long Island Plastic Surgical Group reported a hacking incident to the HHS’ Office for Civil [...]
HHS Faces Lawsuit to Stop the Reproductive Health Care Privacy Rule Enforcement
The Office for Civil Rights (OCR), OCR Director Melanie Fontes Rainer, the Department of Health and Human [...]
OCR Imposes $70,000 Civil Monetary Penalty on Gums Dental Care for HIPAA Right of Access Violation
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) reported the 9th [...]
Supreme Court Declines Biden Administration’s Appeal in Texas Emergency Abortion Case
The Supreme Court refused to review the Biden Administration’s appeal seeking to reverse a lower court [...]
New Cybersecurity Standards Proposed for Healthcare with Stricter Enforcement
Two Democratic Senators have proposed legislation to strengthen cybersecurity in the healthcare sector by [...]
Learning From the Change Healthcare Attack and Steps to Prevent Future Breaches
The attack on Change Healthcare has become a cautionary tale, prompting healthcare organizations to [...]
76,000 Individuals Affected by Richland County, WI October 2023 Cyberattack
Richland County, Wisconsin is informing 76,365 people about a data breach involving their protected health [...]
$55.5 Billion Losses Reported from BEC Attacks
The Federal Bureau of Investigation (FBI) published an alert to businesses concerning the growing threat of [...]
McLaren Health Care IT Systems Now Restored After the Ransomware Attack
McLaren Health Care has reported the successful restoration of all IT systems impacted by the ransomware [...]
Guidance Pushes for Secure by Design Software
Software vendors are being targeted by cybercriminals and nation-state threat actors. In a successful attack [...]
Why a Federal Privacy Law is Necessary with the Advancement of AI
Senate Committee on Commerce, Science and Transportation Chair Maria Cantwell (D-WA) led a committee hearing [...]
19,150 Medicaid Members Impacted by Disability Rights Wisconsin Data Breach
Wisconsin Department of Health Services (DHS) has submitted a breach report involving the potential exposure [...]
10 Examples of HIPAA Violations on Social Media
A benefit of including examples of HIPAA violations on social media in HIPAA training is so members of the [...]
Microsoft Outlook HIPAA Compliance
For users of Microsoft Outlook, HIPAA compliance consists of subscribing to a suitable plan, agreeing to the [...]
WhatsApp and HIPAA Compliance
When discussing WhatsApp and HIPAA compliance, it is important to be aware of the occasions when WhatsApp can [...]
What is the maximum penalty for a HIPAA violation?
The maximum penalty for a HIPAA violation depends on the type and severity of the violation. The Department [...]
WV Healthcare Providers & NJ Medical Billing Administrator Report Data Breaches
It was recently revealed that Charleston Area Medical Center (CAMC) was infiltrated by a cyberattack where [...]
22,000-Record Data Breach Results in RI Attorney General Subpoenas for RIPTA and UnitedHealthcare
An investigation is being conducted by the Rhode Island Attorney General into the UnitedHealthcare and the [...]
University of Arkansas for Medical Sciences & Sacramento County Report Two Breaches
The University of Arkansas for Medical Sciences (UAMS) and Sacramento County have both recently reported [...]
Criminal HIPAA Violation for Former Huntington Hospital Employee
After accessing 12,925 patient records with permission, a former worker at Huntington Hospital in New York [...]
19,000 Individuals Made Aware that Breaches at University Hospital Newark May have Impacted their PHI
It has been discovered that the protected health information of thousands of patients of University Hospital [...]
Tens of Thousands of Professional Dental Alliance Patients Impacted in Phishing Attack on Business Associate
A group of dental clinics practices affiliated with the North American Dental Group, Professional Dental [...]
PHI Compromised in June Cyberattack on University Medical Center of Southern Nevada
An update has been released in relation to the University Medical Center of Southern Nevada (UMC) cyberattack [...]
Northwestern Memorial HealthCare and Renown Health Affected by Elekta Cyberattack
A cyberattack on a business associate of Chicago, IL-based Northwestern Memorial HealthCare and Reno, [...]
20/20 Hearing Care Network Data Breach Impacts over 3.2 Million People
Following the discovery of suspicious activity on their databases, the 20/20 Hearing Care Network has begun [...]
$40,000 Privacy Breach Penalty for Adventist Health Physicians Network
Simi Valley, California based Adventist Health Physicians Network has been directed to hand over $40,000 [...]
Healthcare Cyberattacks Doubled in 2020 According to IBM X-Force
An IBM X-Force report has revealed that the amount of healthcare cyberattacks doubled in 2020 with 28% of [...]
Privacy and Security of COVID-19 to be Protected by Public Health Emergency Privacy Act
Democratic senators introduced the Public Health Emergency Privacy Act on January 28, 2021 in order to [...]
51% Growth in Healthcare Industry Web Application Attacks During December
According to new research published by cybersecurity firm Imperva, there has been a major rise in healthcare [...]
Cyberattack on AspenPointe Affects 295,000
AspenPointe, based in Colorado Springs has revealed that it was impacted by a cyberattack during September [...]
Cybersecurity Impact of COVID-19 on Working Environment Explored in Survey
Before the COVID-19 pandemic the majority of businesses permitted a portion of the workforce to dedicate some [...]
MHealth App Developers and Cloud Services Providers have New Resources made Available by OCR
The Department of Health and Human Services’ Office for Civil Rights has revealed that it has made [...]
Lack of Encryption & Other HIPAA Flaws Leads to $1m HIPAA Penalty
The HHS’ Office for Civil Rights has sanctioned a $1,040,000 HIPAA fine on Lifespan Health System [...]
CVS Pharmacy and Walgreens Break-ins Compromises PHI
CVS Pharmacy is contacting some patients to inform them that some of their personal and protected health [...]
ComplianceHome is a registered trademark. Copyright © 2026 ComplianceHome. All rights reserved.