49,351 Patients Impacts in Alomere Health Phishing Attack
Alexandria, MN-based Alomere Health is contacting around 50,000 patients to inform them that some of their [...]
Articles by Thomas Brown
Three-Year Insider Breach Identified by North Ottawa Community Health System
North Ottawa Community Health System (NOCH) has identified that a staff member at North Ottawa Community [...]
PHI of 10,000 Medicare Beneficiaries Exposed in CMS Blue Button 2.0 Coding Bug
The Centers for Medicare and Medicaid Services (CMS) has found that a bug in its Blue Button 2.0 API that [...]
Healthcare Data Breach Report for November 2019
In November 2019, 33 healthcare data breaches of 500 or more records were made known to the Department of [...]
Google and Alphabet on Ascension Partnership Questioned by Rep. Jayapal
Pressure is mounting on Google and its parent company Alphabet to share information about how the protected [...]
Ramsey County Data Breach Victim Number Increases from 600 to 118,000
Ramsey County has dramatically increased the number of individuals thought to be affected by an August 2018 [...]
Phishing Attack At Fraser Autism Center Affects 3,000 Patients
A phishing attack at Fraser Autism Center of Excellence has resulted in the protected health information [...]
Secretary of HHS Announces Limited HIPAA Waiver due to Hurricane Dorian
The Secretary of the Department of Health and Human Services (HHS), has declared a public health emergency in [...]
Half a Million Records Compromised in Puerto Rico Ransomware Attack
More than half a million records have been compromised in a ransomware attack on the Bayamón Medical Center [...]
Park DuValle Community Health Center Pays $70,000 in Ransomware Attack
Park DuValle Community Health Center has revealed that they were forced to pay hackers $70,000 to recover [...]
2019 See Introduction of New HIPAA Regulations
It is likely, given the Trump Administration’s policy of two regulations out for every new one introduced, [...]
Medical Student Sues Marshall University Hospital for Unauthorized Sharing of X-rays
A medical student has filed a lawsuit against Marshall University and Cabell Huntington Hospital claiming [...]
Break-in at Pardee UNC Health Exposes Patient Data
Pardee UNC Health Care has announced that patient data may have been compromised following a break-in at its [...]
Quest Diagnostics Reveals 12 Million Patients Affected by AMCA Data Breach
Almost 12 million patients of Quest Diagnostics have had their data compromised following a cybersecurity [...]
AMCA Data Breach Affects 7.7 Million LabCorp Patients
LabCorp has announced that the AMCA data breach has affected 7.7 million of their patients. Quest [...]
Health Quest Sends Notifications for 2018 Data Breach
Health Quest is in the process of sending breach notification letters to certain patients concerning a 2018 [...]
Communities Connected for Kids Notifying 501 Individuals of Data Breach
Communities Connected for Kids (CCK) is notifying 501 individuals that an unauthorized individual may have [...]
1,893 Bloodworks Northwest Notified of PHI Exposure
Bloodworks Northwest is notifying 1,893 patients that some of their protected health information (PHI) has [...]
Medical Oncology Hematology Consultants Patient Data Compromised in June 2018 Hacking Incident
Medical Oncology Hematology Consultants (MOHC) is notifying patients that their health data was compromised [...]
Cancer Treatment Centers of America Patient Information Compromised in Phishing Attack
A phishing attack on Cancer Treatment Centers of America (CTCA) has compromised patient protected health [...]
UMC Physicians Patient Data Uploaded to Unsecured Cloud Service
UMC Physicians are sending breach notifications to patients of UMC Southwest Gastroenterology following the [...]
Phishing Attack on Women’s Health USA Affects 17,000 Patients
A phishing attack at Women’s Health USA Inc. has compromised the PHI of 17,000 patients. An employee of [...]
Second Data Security Incident Affects Spectrum Health Lakeland Patients
Spectrum Health Lakeland has notified 1,100 patients that their PHI may have been compromised in a data [...]
American Baptist Homes of the Midwest Suffers Ransomware Attack
American Baptist Homes of the Midwest (ABHM) has provided breach notification letters to patients following a [...]
Most Common HIPAA Violations
The most often experienced HIPAA violations that have resulted in fines are the failure to complete a [...]
Misconfigured Elasticsearch Security Settings Exposes PHI of 137,000 Individuals
Approximately 137,000 individuals have had their data exposed online due to misconfigured security settings [...]
OCR Advises Healthcare Groups to Carry Out Gap Analysis
In its April 2018 cybersecurity newsletter, OCR lauds the benefits of completing a gap analysis along with a [...]
Doctor’s Management Service Inc. Suffers Ransomware Attack
Doctor’s Management Service Inc. is notifying patients of a data breach following a ransomware attack on [...]
Over 2,200 Patients Affected by Harbor Behavioural Health Security Incident
An unauthorised individual has compromised the PHI of over 2,200 patients after gaining access to Harbor [...]
Breach at Health Recovery Services Affects 20,000 Patients
A breach at Health Recovery Services has compromised the protected health information (PHI) of over 20,000 [...]
5,000 Metrocare Service Patients Affected by Phishing Attack
Over 5,000 patients of Metrocare Services have had their protected health information (PHI) comprised [...]
Estimating the Cost of a HIPAA Data Breach
Estimating the cost of a HIPAA data breach is not a streamlined process, at least not until a number of years [...]
HIPAA Compliance & Rackspace
Rackspace is conscious that by making its services available to healthcare groups, the company is classified [...]
What Happens if You Breach HIPAA Rules?
HIPAA requires covered groups to supply training to employees to make sure they are aware of HIPAA rules and [...]
HIPAA Compliant Text Messaging
Even though HIPAA does not specifically rule out sharing Protected Health Information (PHI) by text, a system [...]
HIPAA Compliance and Uber Health
Last month, Uber officially launched Uber Health – a service that allows you to set up transport for [...]
Texas Nurse Sacked Following Social Media HIPAA Breach
A nurse who was working at a Texas children’s hospital has been let go from her position after it was [...]
What is classified as Protected Health Information?
The Health Insurance Portability and Accountability Act (HIPAA) obligates covered bodies to maintain [...]
HIPAA Compliance & Google Voice
Google Voice is a widely used and intuitive telephony service that incorporates voicemail, voicemail [...]
How to Report a HIPAA Violation
It is important that all worker in the healthcare industry have a firm grasp of what a HIPAA violation is and [...]
Can Google Sheets be used in line with HIPAA Rules?
Under HIPAA Rules, healthcare groups must put in place security measures to ensure the confidentiality, [...]
Is Slack HIPAA Compliant?
To date, ascertaining whether or not the Slack is compliant with HIPAA legislation has proved difficult as it [...]
HIPAA Breaches of 2018: Largest Incidents Revealed
This post lists the largest healthcare data breaches of 2018: Healthcare data breaches that have lead to the [...]
Box & HIPAA Compliance
Box is a cloud storage and content management service that allows collaboration and file-sharing or users. [...]
Clearwater Identify Most Frequent Security Weaknesses in Healthcare
The company Clearwater have identified the most frequent security weaknesses in the healthcare sector. They [...]
$75,000 HIPAA Violation Fine Issued to McLean Hospital by Massachusetts Attorney General
A $75,000 HIPAA violation fine has been issued to McLean Hospital by Massachusetts Attorney General Maura [...]
Serious Phishing Threat and Importance of Security Awareness Training Highlighted in Results of Study
A large amount of employees are still being fooled by phishing emails, a new study has revealed. [...]
250-Device Malware Attack Detected by University of Maryland
On December 9, 2018, the University of Maryland Medical System detected an unauthorized individual on its [...]
AMIA and AHIMA: Adjustments to HIPAA Needed to Enhance Access and Portability of Health Data
The American Medical Informatics Association (AMIA) and the American Health Information Management [...]
Potential HIPAA Violation at Key Dental Group
Key Dental Group, a dental clinic in Pembroke Pines, FL, is advising clients of an alleged HIPAA violation [...]
HIPAA Compliance Officer Duties
The Healthcare Insurance Portability and Accountability Act states that an individual(s) within a Covered [...]
Meaningful Use & the HITECH Act
When the HITECH ACT and Meaningful Use incentive program was established in 2009, it was referred to as [...]
What is Covered Under HIPAA?
HIPAA is a federal legislation that established standards in healthcare in relation to patient privacy and [...]
HIPAA Law: What does it Protect?
One of the chief focuses aims of HIPAA is to safeguard the privacy of patients by ensuring certain types of [...]
HIPAA Compliance Verification Explained
HIPAA Compliance Verification is how training providers refer to the process where an individual or [...]
The HITECH Act Explained
The HITECH Act – or Health Information Technology for Economic and Clinical Health Act – formed part of [...]
What Information is Protected by HIPAA?
There can sometimes be confusion about what information is protected by HIPAA due to some sources mistakenly [...]
How to Report a HIPAA Violation Anonymously
Most healthcare group put a lot of work into ensuring they adhere with all relevant HIPAA Rules, but from [...]
What does HIPAA do?
HIPAA is federal legislation that brought in standards in healthcare linked to patient privacy and the [...]
HIPAA Compliance and Healthcare Information
When the Final Omnibus Rule enacted legislation regarding the Health Insurance Portability and Accountability [...]
Dentists & HIPAA Compliance
Dentist and HIPAA Compliance need to be strongly considered as research conducted by the American Dental [...]
Clinical Texting & HIPAA Compliance
HIPAA compliance for clinical texting has become an issue in relation to the use of personal mobile devices [...]
Improving Hospital Workflows
Improving hospital workflows is something that concerns senior healthcare management at all levels. [...]
Report: 70% Rise Increase in Healthcare Data Breaches 2010-17
There has been a 70% rise in healthcare data breaches from 2010-17, according to a study completed by two [...]
Fairview Southdale Hospital ‘Videotaped Patients’ Without Prior Knowledge or Consent Being Given
The HHS’ Centers for Medicare and Medicaid Services (CMS) has conducted a review at Fairview Southdale [...]
App for Healthcare Messaging
A healthcare messaging app is a common way of adhering with the HIPAA security and privacy rules relating to [...]
Do HIPAA Rules Establish Obstacles That Stop Data Sharing?
The HHS has put together a Request for Information (RFI) to ascertain how HIPAA Rules are hampering patient [...]
HIPAA-Covered Entities Exempt from California Consumer Privacy Act Following Amendment
In June 2018, the legislature in California enacted the California Consumer Privacy Act (CCPA) which [...]
What is the Relationship between HITECH, HIPAA, and Electronic Health or Medical Records?
Title 1 of HIPAA initially was formulate to deal with the portability of health insurance and protecting the [...]
Texting Policy for HIPAA
A HIPAA texting policy is a document that should be put together after a risk assessment has been completed [...]
Improving Hospital Communication
The challenge of how to enhance hospital communication is a difficult one, but one that can lead to [...]
Microsoft ADFS Flaw Allows Skipping Past of Multi-Factor Authentication
A flaw has been identified in Microsoft’s Active Directory Federation Services (ADFS) that permits [...]
Is a HIPAA Breach Grounds for Sacking an Employee?
Not all HIPAA breaches are the same, although any breach of HIPAA Rules is a serious matter that calls for [...]
What is the Aim of HIPAA?
HIPAA legislation was first brought in 1996. In its initial form, the legislation assisted in ensuring that [...]
Articles on HIPAA
Here are a variety of HIPAA articles providing further details and guidance on HIPAA compliance for [...]
Email HIPAA Compliance
Whether you need to ensure your email complies with HIPAA will depend on how you are going to use email with [...]
HIPAA Patch Management Requirements Highlighted by OCR
Computer software often has mistakes in the code that could possibly be exploited by malicious actors to gain [...]
Healthcare Data Breach Costs $408 Per Record, More than Any Other Sector
A recent report released by the Ponemon Institute on behalf of IBM Security has revealed the hidden cost of [...]
Humana Reports Sophisticated Cyber Spoofing Attack
Humana is alerting members in a number of states that their PHI may have been accessed during a [...]
App for HIPAA Compliant Messaging
A HIPAA compliant messaging app is a vital part of a secure messaging solution that can allow healthcare [...]
Aetna Survey: Greatest Healthcare Concerns for Consumers are Patient Privacy and Security
A survey conducted by the health insurance group Aetna asked consumers question about their attitudes to [...]
HIPAA Compliance & Text Messages
Sharing PHI in text messages and HIPAA compliance are not usually words you would find beside each other. [...]
Risk Assessment & HIPAA
The requirement for Covered Entities to carry out a HIPAA risk assessment is not a new provision of the [...]
HIPAA Compliance & FaceTime
An thorough search of the Apple website has shown no evidence that Apple will sign a business associate [...]
Healthcare & Secure Text Messages
If your group is in – or associated with – the medical sector, now would be a good point in time to [...]
Email Archiving and HIPAA Compliance
Though HIPAA compliant email archiving is not obligatory under the Security Standards for the Protection of [...]
No Private Cause of Action Confirmed in HIPAA District Court Ruling
Patients who think that HIPAA Rules have been violated can file a compliant to the Department of Health and [...]
Dignity Health Reports Multiple Data Breaches
On May 10, 2018, Dignity Health made OCR aware of a data breach impacting patients of its St. Rose [...]
What is a HIPAA-Covered Entity?
The HIPAA Covered Entity definition seems quite simplistic. The Privacy Rule defines a Covered HIPAA Entity a [...]
Legal Actions Submitted Over Alleged HIPAA Breaches
Two legal actions have recently been filed in relation to alleged breaches of Health Insurance Portability [...]
South Carolina Insurance Data Security Act Signed into Law
On May 14, 2018, South Carolina Governor Henry McMaster the South Carolina Insurance Data Security Act was [...]
Text Messaging Policy for HIPAA
Healthcare organizations and other covered entities are required to put in place a HIPAA text messaging [...]
Consulting Service for HIPAA
HIPAA consulting services are usually firms of compliance specialists with a deep understanding of the Health [...]
Can A Patient Take a Legal Action in relation to a HIPAA Breach?
Can a patient take a legal action for a HIPAA violation? There is no private cause of action in HIPAA, so a [...]
GAO Audit Indicates that Medical Records Can be Difficult and Costly to Obtain
A recent audit completed by the Government Accountability Office (GAO) has shown patients still face many [...]
Hospitals & Internet Access Control
Before talking about how to limit Internet access in hospitals, it might be a good idea to discuss why [...]
HIPAA Compliance & SendGrid
SendGrid is an email marketing service that allows businesses to quickly and easily communicate their [...]
90,000 Records Compromised in Spate of Phishing Attacks on Healthcare Groups
The past few weeks have seen a massive increase in successful phishing attacks on healthcare groups. In a [...]
HIPAA Authorization Defined
The HIPAA Privacy Rule, which was brought in on April 14 2003, introduced standards in relation to allowable [...]
When did HIPAA become Enforceable?
HIPAA became enforceable on August 21, 1996 when then U.S. President Bill Clinton signed the legislation into [...]
ComplianceHome is a registered trademark. Copyright © 2025 ComplianceHome. All rights reserved.