Impermissible Disclosure of Blue Shield of California Members’ PHI to Google Ads
Blue Shield of California, a medical insurance plan company, reported a privacy breach involving web trackers [...]
Articles by Thomas Brown
Policy Secure, Ivanti Connect Secure, and ZTA Gateways Vulnerabilities Detected
A recent advisory from the U.S. Cybersecurity and Infrastructure Security Agency (CISA) indicates that a [...]
Azura Vascular Care to Pay $3.15 Million to Settle Data Breach Lawsuit
Fresenius Vascular Care, Inc., also called Azura Vascular Care, agreed to settle a class action lawsuit. [...]
OCR Conducts Third Phase of HIPAA Compliance Audits
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has announced the [...]
Nebraska Approves the Law that Shields Companies from Class Action Liability
On March 17, 2025, Legislative Bill 241 has been approved after Nebraska Governor Jim Pillen signed the law. [...]
RIPTA to Resolve Ransomware Attack Lawsuit with $350,000 Settlement Fund
Rhode Island Public Transit Authority (RIPTA) agreed to settle a lawsuit associated with a ransomware attack [...]
Vulnerabilities Found in Blood Glucose Monitoring Android App of Dario Health
Dario Health found seven vulnerabilities in its Android app and web-based server infrastructure. An attacker [...]
Arietis Health Pays $2.8 Million to Resolve MOVEit Data Breach Lawsuit
Arietis Health agreed to a $2.8 million settlement to resolve a class action lawsuit associated with a [...]
Deadline Announced for Filing Motions to Dismiss in Change Healthcare Data Breach Lawsuits
A District Court Judge has set the due date in March 2025 for Change Healthcare to submit motions to dismiss [...]
$5 Million Deloitte Fund to Cover Rhode Island Ransomware Attack Expenses
Rhode Island Governor Dan McKee has reported Deloitte’s decision to pay the state of Rhode Island $5 [...]
Chainalysis’ Reports Upsurge in Ransomware Attacks in 2024 but Less Ransom Payments
A blockchain analysis indicates a growing unwillingness to pay ransomware groups. Chainalysis’ new [...]
New York Blood Center Enterprises Confirms Data Breach
New York Blood Center Enterprises (NYBCe), another U.S. blood donation company, encountered a ransomware [...]
New Acting HHS Secretary Appointment
President Trump gave Dr. Dorothy Fink the new Acting Secretary of the Department of Health and Human Services [...]
PHI of 3.4 Million Wolf Haldenstein Clients Exposed
Adler Freeman & Herz LLP (Wolf Haldenstein) in New York City has experienced a serious data breach [...]
MU Health Care Settles Data Breach Lawsuit for $8 Million
University of Missouri Health Care (MU Health Care) has decided to pay $8 million to settle a class action [...]
Brain Cipher Ransomware Group Starts Leaking Stolen Data from RI Bridges
The Brain Cipher ransomware group that claimed to be responsible for the cyberattack on the online health and [...]
HHS Asks Health Industry to Boost OT & IoMT Security
The Department of Health and Human Services (HHS) asks healthcare providers to take the appropriate measures [...]
5.6 Million Patients Affected by Ascension Ransomware Attack
In May 2024, Ascension Health encountered a ransomware attack, but it took to identify the number of people [...]
Democratic Senators Introduce Health and Location Data Protection Act of 2024
A new bill was presented in the Senate that could stop data brokers from using unfair and deceitful acts and [...]
Illegal Access of Medical Records Committed by an Organ Transplant Coordinator
In July 2024, a federal jury pronounced Trent James Russell guilty for illegally accessing the medical [...]
UMC Health Confirms September Ransomware Attack and Notifies Impacted Patients
UMC Health System began informing patients about the exposure of some of their protected health information [...]
Change Healthcare’s Clearinghouse Services Available Now After the February Ransomware Attack
Change Healthcare has reported the complete restoration of its clearinghouse services after encountering a [...]
Updated Security Risk Assessment Tool Released by OCR
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) presently has an enforcement [...]
1.8 Million Individuals Impacted by Ransomware Attack on Summit Pathology
Summit Pathology Laboratories, Inc. based in Colorado reported a data breach to the HHS’ Office for Civil [...]
161K-Record Data Breach Reported by Long Island Plastic Surgical Group
New York-based Long Island Plastic Surgical Group reported a hacking incident to the HHS’ Office for Civil [...]
HHS Faces Lawsuit to Stop the Reproductive Health Care Privacy Rule Enforcement
The Office for Civil Rights (OCR), OCR Director Melanie Fontes Rainer, the Department of Health and Human [...]
OCR Imposes $70,000 Civil Monetary Penalty on Gums Dental Care for HIPAA Right of Access Violation
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) reported the 9th [...]
Supreme Court Declines Biden Administration’s Appeal in Texas Emergency Abortion Case
The Supreme Court refused to review the Biden Administration’s appeal seeking to reverse a lower court [...]
New Cybersecurity Standards Proposed for Healthcare with Stricter Enforcement
Two Democratic Senators have proposed legislation to strengthen cybersecurity in the healthcare sector by [...]
Learning From the Change Healthcare Attack and Steps to Prevent Future Breaches
The attack on Change Healthcare has become a cautionary tale, prompting healthcare organizations to [...]
76,000 Individuals Affected by Richland County, WI October 2023 Cyberattack
Richland County, Wisconsin is informing 76,365 people about a data breach involving their protected health [...]
$55.5 Billion Losses Reported from BEC Attacks
The Federal Bureau of Investigation (FBI) published an alert to businesses concerning the growing threat of [...]
McLaren Health Care IT Systems Now Restored After the Ransomware Attack
McLaren Health Care has reported the successful restoration of all IT systems impacted by the ransomware [...]
Guidance Pushes for Secure by Design Software
Software vendors are being targeted by cybercriminals and nation-state threat actors. In a successful attack [...]
Why a Federal Privacy Law is Necessary with the Advancement of AI
Senate Committee on Commerce, Science and Transportation Chair Maria Cantwell (D-WA) led a committee hearing [...]
19,150 Medicaid Members Impacted by Disability Rights Wisconsin Data Breach
Wisconsin Department of Health Services (DHS) has submitted a breach report involving the potential exposure [...]
ComplianceJunction HIPAA Training Course Accredited by AHIMA
The healthcare training company ComplianceJunction has announced that its HIPAA Training for Organizations [...]
10 Examples of HIPAA Violations on Social Media
A benefit of including examples of HIPAA violations on social media in HIPAA training is so members of the [...]
Microsoft Outlook HIPAA Compliance
For users of Microsoft Outlook, HIPAA compliance consists of subscribing to a suitable plan, agreeing to the [...]
WhatsApp and HIPAA Compliance
When discussing WhatsApp and HIPAA compliance, it is important to be aware of the occasions when WhatsApp can [...]
What is the maximum penalty for a HIPAA violation?
The maximum penalty for a HIPAA violation depends on the type and severity of the violation. The Department [...]
WV Healthcare Providers & NJ Medical Billing Administrator Report Data Breaches
It was recently revealed that Charleston Area Medical Center (CAMC) was infiltrated by a cyberattack where [...]
22,000-Record Data Breach Results in RI Attorney General Subpoenas for RIPTA and UnitedHealthcare
An investigation is being conducted by the Rhode Island Attorney General into the UnitedHealthcare and the [...]
University of Arkansas for Medical Sciences & Sacramento County Report Two Breaches
The University of Arkansas for Medical Sciences (UAMS) and Sacramento County have both recently reported [...]
Criminal HIPAA Violation for Former Huntington Hospital Employee
After accessing 12,925 patient records with permission, a former worker at Huntington Hospital in New York [...]
19,000 Individuals Made Aware that Breaches at University Hospital Newark May have Impacted their PHI
It has been discovered that the protected health information of thousands of patients of University Hospital [...]
Tens of Thousands of Professional Dental Alliance Patients Impacted in Phishing Attack on Business Associate
A group of dental clinics practices affiliated with the North American Dental Group, Professional Dental [...]
PHI Compromised in June Cyberattack on University Medical Center of Southern Nevada
An update has been released in relation to the University Medical Center of Southern Nevada (UMC) cyberattack [...]
Northwestern Memorial HealthCare and Renown Health Affected by Elekta Cyberattack
A cyberattack on a business associate of Chicago, IL-based Northwestern Memorial HealthCare and Reno, [...]
20/20 Hearing Care Network Data Breach Impacts over 3.2 Million People
Following the discovery of suspicious activity on their databases, the 20/20 Hearing Care Network has begun [...]
$40,000 Privacy Breach Penalty for Adventist Health Physicians Network
Simi Valley, California based Adventist Health Physicians Network has been directed to hand over $40,000 [...]
Healthcare Cyberattacks Doubled in 2020 According to IBM X-Force
An IBM X-Force report has revealed that the amount of healthcare cyberattacks doubled in 2020 with 28% of [...]
Privacy and Security of COVID-19 to be Protected by Public Health Emergency Privacy Act
Democratic senators introduced the Public Health Emergency Privacy Act on January 28, 2021 in order to [...]
51% Growth in Healthcare Industry Web Application Attacks During December
According to new research published by cybersecurity firm Imperva, there has been a major rise in healthcare [...]
Cyberattack on AspenPointe Affects 295,000
AspenPointe, based in Colorado Springs has revealed that it was impacted by a cyberattack during September [...]
Cybersecurity Impact of COVID-19 on Working Environment Explored in Survey
Before the COVID-19 pandemic the majority of businesses permitted a portion of the workforce to dedicate some [...]
MHealth App Developers and Cloud Services Providers have New Resources made Available by OCR
The Department of Health and Human Services’ Office for Civil Rights has revealed that it has made [...]
Lack of Encryption & Other HIPAA Flaws Leads to $1m HIPAA Penalty
The HHS’ Office for Civil Rights has sanctioned a $1,040,000 HIPAA fine on Lifespan Health System [...]
CVS Pharmacy and Walgreens Break-ins Compromises PHI
CVS Pharmacy is contacting some patients to inform them that some of their personal and protected health [...]
Two Recent Cyberattacks Result in $107,000 Stolen from Kentucky Employees’ Health Plan Members
The Commonwealth of Kentucky Personnel Cabinet has revealed that two data breaches took place between late [...]
Nigerian BEC Scammers Target Government Healthcare Agencies & COVID-19 Research Organizations
Business email compromise actors working out of Nigeria have been targeting government healthcare agencies, [...]
OCR Issues Guidance in relation to Filming and Access to Healthcare Facilities
The HHS’ Office for Civil Rights (OCR) has released a directive for healthcare providers to follow which [...]
82% of Public-Facing Exchange Servers Remain Susceptible to Actively Exploited Critical Vulnerability
On February Patch Tuesday, 2020, Microsoft made a patch available to address a critical vulnerability [...]
Hartford Healthcare and Saint Francis Ministries Suffer Phishing Attacks
The Saint Francis Ministries health system has revealed that the email account of one of its staff members [...]
Andrews Braces Hack May Have Compromised PHI of 16,600 Patients
The Sparks, NV orthodontics practice, Andrews Braces, has said that a ransomware attack took place on [...]
More than 113,000 Patients of Brandywine Urology Consultants Ransomware Attack
Delaware-based Brandywine Urology Consultants has made public that it suffered a ransomware attack on January [...]
COVID-19 Crisis: OCR Publishes Allowable Disclosures of PHI to First Responders
The U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) has made available [...]
COVID19 Pandemic Leads to Huge Spike in Cyber-Attacks Targeting WHO
An attorney for New York-based cybersecurity experts Blackstone Law Group has discovered that the World [...]
Coronavirus Pandemic: OCR Publishes Guidance on Telehealth and HIPAA
HHS’ Office for Civil Rights (OCR) has released guidance on telehealth and remote communications. This [...]
Webinar 03/18/20: Discover the Untold Benefits of HIPAA Compliance
If you are a HIPAA-covered organisation, exiting associate, or you hope to begin providing services to [...]
Healthcare Worker Arraigned on 430 Counts Following Criminal HIPAA Violation
A previous staff member of ACM Global Laboratories, part of Rochester Regional Health, has been accused of [...]
Healthcare Data Breach Report for January 2020 Published
The Department of Health and Human Services’ Office for Civil Rights were inundated during January with [...]
2018 Phishing Attack Impacted more Quest Health Systems Discovers Patients than First Thought
Health Quest, which is now an entity of Nuvance Health, has discovered the phishing attack impacted its [...]
SouthEast Eye Specialist Group Phishing Impacts 13,000 Patients
SouthEast Eye Specialist (SEES) Group located in Franklin, TN, is contacting 13,000 patients to make them [...]
49,351 Patients Impacts in Alomere Health Phishing Attack
Alexandria, MN-based Alomere Health is contacting around 50,000 patients to inform them that some of their [...]
Three-Year Insider Breach Identified by North Ottawa Community Health System
North Ottawa Community Health System (NOCH) has identified that a staff member at North Ottawa Community [...]
PHI of 10,000 Medicare Beneficiaries Exposed in CMS Blue Button 2.0 Coding Bug
The Centers for Medicare and Medicaid Services (CMS) has found that a bug in its Blue Button 2.0 API that [...]
Healthcare Data Breach Report for November 2019
In November 2019, 33 healthcare data breaches of 500 or more records were made known to the Department of [...]
Google and Alphabet on Ascension Partnership Questioned by Rep. Jayapal
Pressure is mounting on Google and its parent company Alphabet to share information about how the protected [...]
Ramsey County Data Breach Victim Number Increases from 600 to 118,000
Ramsey County has dramatically increased the number of individuals thought to be affected by an August 2018 [...]
Phishing Attack At Fraser Autism Center Affects 3,000 Patients
A phishing attack at Fraser Autism Center of Excellence has resulted in the protected health information [...]
Secretary of HHS Announces Limited HIPAA Waiver due to Hurricane Dorian
The Secretary of the Department of Health and Human Services (HHS), has declared a public health emergency in [...]
Half a Million Records Compromised in Puerto Rico Ransomware Attack
More than half a million records have been compromised in a ransomware attack on the Bayamón Medical Center [...]
Park DuValle Community Health Center Pays $70,000 in Ransomware Attack
Park DuValle Community Health Center has revealed that they were forced to pay hackers $70,000 to recover [...]
2019 See Introduction of New HIPAA Regulations
It is likely, given the Trump Administration’s policy of two regulations out for every new one introduced, [...]
Medical Student Sues Marshall University Hospital for Unauthorized Sharing of X-rays
A medical student has filed a lawsuit against Marshall University and Cabell Huntington Hospital claiming [...]
Break-in at Pardee UNC Health Exposes Patient Data
Pardee UNC Health Care has announced that patient data may have been compromised following a break-in at its [...]
Quest Diagnostics Reveals 12 Million Patients Affected by AMCA Data Breach
Almost 12 million patients of Quest Diagnostics have had their data compromised following a cybersecurity [...]
AMCA Data Breach Affects 7.7 Million LabCorp Patients
LabCorp has announced that the AMCA data breach has affected 7.7 million of their patients. Quest [...]
Health Quest Sends Notifications for 2018 Data Breach
Health Quest is in the process of sending breach notification letters to certain patients concerning a 2018 [...]
Communities Connected for Kids Notifying 501 Individuals of Data Breach
Communities Connected for Kids (CCK) is notifying 501 individuals that an unauthorized individual may have [...]
1,893 Bloodworks Northwest Notified of PHI Exposure
Bloodworks Northwest is notifying 1,893 patients that some of their protected health information (PHI) has [...]
Medical Oncology Hematology Consultants Patient Data Compromised in June 2018 Hacking Incident
Medical Oncology Hematology Consultants (MOHC) is notifying patients that their health data was compromised [...]
Cancer Treatment Centers of America Patient Information Compromised in Phishing Attack
A phishing attack on Cancer Treatment Centers of America (CTCA) has compromised patient protected health [...]
UMC Physicians Patient Data Uploaded to Unsecured Cloud Service
UMC Physicians are sending breach notifications to patients of UMC Southwest Gastroenterology following the [...]
Phishing Attack on Women’s Health USA Affects 17,000 Patients
A phishing attack at Women’s Health USA Inc. has compromised the PHI of 17,000 patients. An employee of [...]
Second Data Security Incident Affects Spectrum Health Lakeland Patients
Spectrum Health Lakeland has notified 1,100 patients that their PHI may have been compromised in a data [...]
American Baptist Homes of the Midwest Suffers Ransomware Attack
American Baptist Homes of the Midwest (ABHM) has provided breach notification letters to patients following a [...]
Most Common HIPAA Violations
The most often experienced HIPAA violations that have resulted in fines are the failure to complete a [...]
Misconfigured Elasticsearch Security Settings Exposes PHI of 137,000 Individuals
Approximately 137,000 individuals have had their data exposed online due to misconfigured security settings [...]
ComplianceHome is a registered trademark. Copyright © 2025 ComplianceHome. All rights reserved.