Microsoft Outlook HIPAA Compliance
For users of Microsoft Outlook, HIPAA compliance consists of subscribing to a suitable plan, agreeing to the [...]
Articles by Thomas Brown
WhatsApp and HIPAA Compliance
When discussing WhatsApp and HIPAA compliance, it is important to be aware of the occasions when WhatsApp can [...]
What is the maximum penalty for a HIPAA violation?
The maximum penalty for a HIPAA violation depends on the type and severity of the violation. The Department [...]
Class Action Lawsuit Over Data Breach for Logan Health
Following a 2021 data breach that impacted 213,543 patients of Logan Health Medical Center a legal action has [...]
WV Healthcare Providers & NJ Medical Billing Administrator Report Data Breaches
It was recently revealed that Charleston Area Medical Center (CAMC) was infiltrated by a cyberattack where [...]
22,000-Record Data Breach Results in RI Attorney General Subpoenas for RIPTA and UnitedHealthcare
An investigation is being conducted by the Rhode Island Attorney General into the UnitedHealthcare and the [...]
University of Arkansas for Medical Sciences & Sacramento County Report Two Breaches
The University of Arkansas for Medical Sciences (UAMS) and Sacramento County have both recently reported [...]
Criminal HIPAA Violation for Former Huntington Hospital Employee
After accessing 12,925 patient records with permission, a former worker at Huntington Hospital in New York [...]
19,000 Individuals Made Aware that Breaches at University Hospital Newark May have Impacted their PHI
It has been discovered that the protected health information of thousands of patients of University Hospital [...]
Tens of Thousands of Professional Dental Alliance Patients Impacted in Phishing Attack on Business Associate
A group of dental clinics practices affiliated with the North American Dental Group, Professional Dental [...]
PHI Compromised in June Cyberattack on University Medical Center of Southern Nevada
An update has been released in relation to the University Medical Center of Southern Nevada (UMC) cyberattack [...]
Northwestern Memorial HealthCare and Renown Health Affected by Elekta Cyberattack
A cyberattack on a business associate of Chicago, IL-based Northwestern Memorial HealthCare and Reno, [...]
20/20 Hearing Care Network Data Breach Impacts over 3.2 Million People
Following the discovery of suspicious activity on their databases, the 20/20 Hearing Care Network has begun [...]
$40,000 Privacy Breach Penalty for Adventist Health Physicians Network
Simi Valley, California based Adventist Health Physicians Network has been directed to hand over $40,000 [...]
How Often is HIPAA Training Required?
Both the Privacy Rule and the Security Rule of the Health Insurance Portability and Accountability Act [...]
Healthcare Cyberattacks Doubled in 2020 According to IBM X-Force
An IBM X-Force report has revealed that the amount of healthcare cyberattacks doubled in 2020 with 28% of [...]
Privacy and Security of COVID-19 to be Protected by Public Health Emergency Privacy Act
Democratic senators introduced the Public Health Emergency Privacy Act on January 28, 2021 in order to [...]
51% Growth in Healthcare Industry Web Application Attacks During December
According to new research published by cybersecurity firm Imperva, there has been a major rise in healthcare [...]
Cyberattack on AspenPointe Affects 295,000
AspenPointe, based in Colorado Springs has revealed that it was impacted by a cyberattack during September [...]
Civil Monetary Penalties for HIPAA Violations Increased by HHS in Line with Inflation
In accordance with the Inflation Adjustment Act, the U.S Department of Health and Human Services has [...]
Cybersecurity Impact of COVID-19 on Working Environment Explored in Survey
Before the COVID-19 pandemic the majority of businesses permitted a portion of the workforce to dedicate some [...]
MHealth App Developers and Cloud Services Providers have New Resources made Available by OCR
The Department of Health and Human Services’ Office for Civil Rights has revealed that it has made [...]
Lack of Encryption & Other HIPAA Flaws Leads to $1m HIPAA Penalty
The HHS’ Office for Civil Rights has sanctioned a $1,040,000 HIPAA fine on Lifespan Health System [...]
CVS Pharmacy and Walgreens Break-ins Compromises PHI
CVS Pharmacy is contacting some patients to inform them that some of their personal and protected health [...]
Two Recent Cyberattacks Result in $107,000 Stolen from Kentucky Employees’ Health Plan Members
The Commonwealth of Kentucky Personnel Cabinet has revealed that two data breaches took place between late [...]
Californian Company Confirmed as HIPAA Compliant
Compliancy Group has awarded Safe Partner Inc. HIPAA Compliance status following a test where the group was [...]
HIPAA Violations Lead to Employee Dismissals in Michigan & Illinois
Two separate incidents where HIPAA has been violated have led to healthcare workers being fired from their [...]
Nigerian BEC Scammers Target Government Healthcare Agencies & COVID-19 Research Organizations
Business email compromise actors working out of Nigeria have been targeting government healthcare agencies, [...]
OCR Issues Guidance in relation to Filming and Access to Healthcare Facilities
The HHS’ Office for Civil Rights (OCR) has released a directive for healthcare providers to follow which [...]
82% of Public-Facing Exchange Servers Remain Susceptible to Actively Exploited Critical Vulnerability
On February Patch Tuesday, 2020, Microsoft made a patch available to address a critical vulnerability [...]
Hartford Healthcare and Saint Francis Ministries Suffer Phishing Attacks
The Saint Francis Ministries health system has revealed that the email account of one of its staff members [...]
Andrews Braces Hack May Have Compromised PHI of 16,600 Patients
The Sparks, NV orthodontics practice, Andrews Braces, has said that a ransomware attack took place on [...]
More than 113,000 Patients of Brandywine Urology Consultants Ransomware Attack
Delaware-based Brandywine Urology Consultants has made public that it suffered a ransomware attack on January [...]
COVID-19 Crisis: OCR Publishes Allowable Disclosures of PHI to First Responders
The U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) has made available [...]
COVID19 Pandemic Leads to Huge Spike in Cyber-Attacks Targeting WHO
An attorney for New York-based cybersecurity experts Blackstone Law Group has discovered that the World [...]
Coronavirus Pandemic: OCR Publishes Guidance on Telehealth and HIPAA
HHS’ Office for Civil Rights (OCR) has released guidance on telehealth and remote communications. This [...]
HIPAA Compliance and COVID-19 Coronavirus
HIPAA covered bodies – healthcare providers, health plans, healthcare clearinghouses – and business [...]
Webinar 03/18/20: Discover the Untold Benefits of HIPAA Compliance
If you are a HIPAA-covered organisation, exiting associate, or you hope to begin providing services to [...]
Healthcare Worker Arraigned on 430 Counts Following Criminal HIPAA Violation
A previous staff member of ACM Global Laboratories, part of Rochester Regional Health, has been accused of [...]
OIG Audit Investigation Uncovered Wrongful Use of Medicare Part D Eligibility Verification Transactions
An audit completed by the Department of Health and Human Services’ Office of Inspector General (OIG) has [...]
Healthcare Data Breach Report for January 2020 Published
The Department of Health and Human Services’ Office for Civil Rights were inundated during January with [...]
2018 Phishing Attack Impacted more Quest Health Systems Discovers Patients than First Thought
Health Quest, which is now an entity of Nuvance Health, has discovered the phishing attack impacted its [...]
SouthEast Eye Specialist Group Phishing Impacts 13,000 Patients
SouthEast Eye Specialist (SEES) Group located in Franklin, TN, is contacting 13,000 patients to make them [...]
49,351 Patients Impacts in Alomere Health Phishing Attack
Alexandria, MN-based Alomere Health is contacting around 50,000 patients to inform them that some of their [...]
Three-Year Insider Breach Identified by North Ottawa Community Health System
North Ottawa Community Health System (NOCH) has identified that a staff member at North Ottawa Community [...]
PHI of 10,000 Medicare Beneficiaries Exposed in CMS Blue Button 2.0 Coding Bug
The Centers for Medicare and Medicaid Services (CMS) has found that a bug in its Blue Button 2.0 API that [...]
Healthcare Data Breach Report for November 2019
In November 2019, 33 healthcare data breaches of 500 or more records were made known to the Department of [...]
Attacks on Medical Devices and Implants Possible Tanks to Poor RSA Encryption Implementation
Encryption makes data inaccessible to unauthorized persons, once the private key to decrypt data is not [...]
Google and Alphabet on Ascension Partnership Questioned by Rep. Jayapal
Pressure is mounting on Google and its parent company Alphabet to share information about how the protected [...]
Cybersecuirty Researchers Identify New Emotet Banking Trojan Campaign
Cybersecurity researchers have identified a significant spam campaign spreading an Emotet banking Trojan via [...]
Ramsey County Data Breach Victim Number Increases from 600 to 118,000
Ramsey County has dramatically increased the number of individuals thought to be affected by an August 2018 [...]
Phishing Attack At Fraser Autism Center Affects 3,000 Patients
A phishing attack at Fraser Autism Center of Excellence has resulted in the protected health information [...]
Secretary of HHS Announces Limited HIPAA Waiver due to Hurricane Dorian
The Secretary of the Department of Health and Human Services (HHS), has declared a public health emergency in [...]
Half a Million Records Compromised in Puerto Rico Ransomware Attack
More than half a million records have been compromised in a ransomware attack on the Bayamón Medical Center [...]
Park DuValle Community Health Center Pays $70,000 in Ransomware Attack
Park DuValle Community Health Center has revealed that they were forced to pay hackers $70,000 to recover [...]
2019 See Introduction of New HIPAA Regulations
It is likely, given the Trump Administration’s policy of two regulations out for every new one introduced, [...]
Medical Student Sues Marshall University Hospital for Unauthorized Sharing of X-rays
A medical student has filed a lawsuit against Marshall University and Cabell Huntington Hospital claiming [...]
Break-in at Pardee UNC Health Exposes Patient Data
Pardee UNC Health Care has announced that patient data may have been compromised following a break-in at its [...]
Quest Diagnostics Reveals 12 Million Patients Affected by AMCA Data Breach
Almost 12 million patients of Quest Diagnostics have had their data compromised following a cybersecurity [...]
AMCA Data Breach Affects 7.7 Million LabCorp Patients
LabCorp has announced that the AMCA data breach has affected 7.7 million of their patients. Quest [...]
Health Quest Sends Notifications for 2018 Data Breach
Health Quest is in the process of sending breach notification letters to certain patients concerning a 2018 [...]
How to Best Comply with HIPAA Password Requirements
Before discussing how to best comply with the HIPAA password requirements it may be useful to first explain [...]
Communities Connected for Kids Notifying 501 Individuals of Data Breach
Communities Connected for Kids (CCK) is notifying 501 individuals that an unauthorized individual may have [...]
1,893 Bloodworks Northwest Notified of PHI Exposure
Bloodworks Northwest is notifying 1,893 patients that some of their protected health information (PHI) has [...]
Medical Oncology Hematology Consultants Patient Data Compromised in June 2018 Hacking Incident
Medical Oncology Hematology Consultants (MOHC) is notifying patients that their health data was compromised [...]
Designated HIPAA Security Officer
All Covered Entities are obligated by 45 CFR 164.308 – the Administrative Safeguards of the HIPAA Security [...]
Cancer Treatment Centers of America Patient Information Compromised in Phishing Attack
A phishing attack on Cancer Treatment Centers of America (CTCA) has compromised patient protected health [...]
UMC Physicians Patient Data Uploaded to Unsecured Cloud Service
UMC Physicians are sending breach notifications to patients of UMC Southwest Gastroenterology following the [...]
Phishing Attack on Women’s Health USA Affects 17,000 Patients
A phishing attack at Women’s Health USA Inc. has compromised the PHI of 17,000 patients. An employee of [...]
Second Data Security Incident Affects Spectrum Health Lakeland Patients
Spectrum Health Lakeland has notified 1,100 patients that their PHI may have been compromised in a data [...]
American Baptist Homes of the Midwest Suffers Ransomware Attack
American Baptist Homes of the Midwest (ABHM) has provided breach notification letters to patients following a [...]
Most Common HIPAA Violations
The most often experienced HIPAA violations that have resulted in fines are the failure to complete a [...]
Misconfigured Elasticsearch Security Settings Exposes PHI of 137,000 Individuals
Approximately 137,000 individuals have had their data exposed online due to misconfigured security settings [...]
OCR Advises Healthcare Groups to Carry Out Gap Analysis
In its April 2018 cybersecurity newsletter, OCR lauds the benefits of completing a gap analysis along with a [...]
Doctor’s Management Service Inc. Suffers Ransomware Attack
Doctor’s Management Service Inc. is notifying patients of a data breach following a ransomware attack on [...]
Over 2,200 Patients Affected by Harbor Behavioural Health Security Incident
An unauthorised individual has compromised the PHI of over 2,200 patients after gaining access to Harbor [...]
Breach at Health Recovery Services Affects 20,000 Patients
A breach at Health Recovery Services has compromised the protected health information (PHI) of over 20,000 [...]
5,000 Metrocare Service Patients Affected by Phishing Attack
Over 5,000 patients of Metrocare Services have had their protected health information (PHI) comprised [...]
Contingency Planning & HIPAA Rules
In its March 2018 cybersecurity email newsletter, OCR outlined HIPAA Rules on contingency planning and [...]
Estimating the Cost of a HIPAA Data Breach
Estimating the cost of a HIPAA data breach is not a streamlined process, at least not until a number of years [...]
HIPAA Compliance & Rackspace
Rackspace is conscious that by making its services available to healthcare groups, the company is classified [...]
What Happens if You Breach HIPAA Rules?
HIPAA requires covered groups to supply training to employees to make sure they are aware of HIPAA rules and [...]
HIPAA Compliant Text Messaging
Even though HIPAA does not specifically rule out sharing Protected Health Information (PHI) by text, a system [...]
HIPAA Compliance and Uber Health
Last month, Uber officially launched Uber Health – a service that allows you to set up transport for [...]
How Can Physicians Use Secure Texting
Secure texting for physicians can allow them to share and receive Protected Health Information (PHI) via any [...]
Texas Nurse Sacked Following Social Media HIPAA Breach
A nurse who was working at a Texas children’s hospital has been let go from her position after it was [...]
HIPAA Certification Explained
In a perfect world, HIPAA certification would prove that all parts of HIPAA Rules are understood and being [...]
What is classified as Protected Health Information?
The Health Insurance Portability and Accountability Act (HIPAA) obligates covered bodies to maintain [...]
HIPAA Compliance & Google Voice
Google Voice is a widely used and intuitive telephony service that incorporates voicemail, voicemail [...]
How to Report a HIPAA Violation
It is important that all worker in the healthcare industry have a firm grasp of what a HIPAA violation is and [...]
Software for HIPAA Compliance
The terms “HIPAA compliant software” and “HIPAA compliance software” are often used interchangeably [...]
Can Google Sheets be used in line with HIPAA Rules?
Under HIPAA Rules, healthcare groups must put in place security measures to ensure the confidentiality, [...]
Is Slack HIPAA Compliant?
To date, ascertaining whether or not the Slack is compliant with HIPAA legislation has proved difficult as it [...]
HIPAA Breaches of 2018: Largest Incidents Revealed
This post lists the largest healthcare data breaches of 2018: Healthcare data breaches that have lead to the [...]
Box & HIPAA Compliance
Box is a cloud storage and content management service that allows collaboration and file-sharing or users. [...]
NIST Publishes Final Version of Amended Risk Management Framework
The National Institute of Standards and Technology (NIST) has published the final version of its amended Risk [...]
Clearwater Identify Most Frequent Security Weaknesses in Healthcare
The company Clearwater have identified the most frequent security weaknesses in the healthcare sector. They [...]
$75,000 HIPAA Violation Fine Issued to McLean Hospital by Massachusetts Attorney General
A $75,000 HIPAA violation fine has been issued to McLean Hospital by Massachusetts Attorney General Maura [...]
Rise of Healthcare Organisation Ransomware Attacks in Past Year
27% of healthcare employees claim their organisation has experienced at least one ransomware attack in the [...]
Serious Phishing Threat and Importance of Security Awareness Training Highlighted in Results of Study
A large amount of employees are still being fooled by phishing emails, a new study has revealed. [...]
Copyright © 2024 ComplianceHome