UMC Health Confirms September Ransomware Attack and Notifies Impacted Patients
UMC Health System began informing patients about the exposure of some of their protected health information [...]
Articles by Thomas Brown
Change Healthcare’s Clearinghouse Services Available Now After the February Ransomware Attack
Change Healthcare has reported the complete restoration of its clearinghouse services after encountering a [...]
Updated Security Risk Assessment Tool Released by OCR
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) presently has an enforcement [...]
1.8 Million Individuals Impacted by Ransomware Attack on Summit Pathology
Summit Pathology Laboratories, Inc. based in Colorado reported a data breach to the HHS’ Office for Civil [...]
161K-Record Data Breach Reported by Long Island Plastic Surgical Group
New York-based Long Island Plastic Surgical Group reported a hacking incident to the HHS’ Office for Civil [...]
HHS Faces Lawsuit to Stop the Reproductive Health Care Privacy Rule Enforcement
The Office for Civil Rights (OCR), OCR Director Melanie Fontes Rainer, the Department of Health and Human [...]
OCR Imposes $70,000 Civil Monetary Penalty on Gums Dental Care for HIPAA Right of Access Violation
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) reported the 9th [...]
Supreme Court Declines Biden Administration’s Appeal in Texas Emergency Abortion Case
The Supreme Court refused to review the Biden Administration’s appeal seeking to reverse a lower court [...]
New Cybersecurity Standards Proposed for Healthcare with Stricter Enforcement
Two Democratic Senators have proposed legislation to strengthen cybersecurity in the healthcare sector by [...]
Learning From the Change Healthcare Attack and Steps to Prevent Future Breaches
The attack on Change Healthcare has become a cautionary tale, prompting healthcare organizations to [...]
76,000 Individuals Affected by Richland County, WI October 2023 Cyberattack
Richland County, Wisconsin is informing 76,365 people about a data breach involving their protected health [...]
$55.5 Billion Losses Reported from BEC Attacks
The Federal Bureau of Investigation (FBI) published an alert to businesses concerning the growing threat of [...]
McLaren Health Care IT Systems Now Restored After the Ransomware Attack
McLaren Health Care has reported the successful restoration of all IT systems impacted by the ransomware [...]
Guidance Pushes for Secure by Design Software
Software vendors are being targeted by cybercriminals and nation-state threat actors. In a successful attack [...]
Why a Federal Privacy Law is Necessary with the Advancement of AI
Senate Committee on Commerce, Science and Transportation Chair Maria Cantwell (D-WA) led a committee hearing [...]
19,150 Medicaid Members Impacted by Disability Rights Wisconsin Data Breach
Wisconsin Department of Health Services (DHS) has submitted a breach report involving the potential exposure [...]
10 Examples of HIPAA Violations on Social Media
A benefit of including examples of HIPAA violations on social media in HIPAA training is so members of the [...]
Microsoft Outlook HIPAA Compliance
For users of Microsoft Outlook, HIPAA compliance consists of subscribing to a suitable plan, agreeing to the [...]
WhatsApp and HIPAA Compliance
When discussing WhatsApp and HIPAA compliance, it is important to be aware of the occasions when WhatsApp can [...]
What is the maximum penalty for a HIPAA violation?
The maximum penalty for a HIPAA violation depends on the type and severity of the violation. The Department [...]
WV Healthcare Providers & NJ Medical Billing Administrator Report Data Breaches
It was recently revealed that Charleston Area Medical Center (CAMC) was infiltrated by a cyberattack where [...]
22,000-Record Data Breach Results in RI Attorney General Subpoenas for RIPTA and UnitedHealthcare
An investigation is being conducted by the Rhode Island Attorney General into the UnitedHealthcare and the [...]
University of Arkansas for Medical Sciences & Sacramento County Report Two Breaches
The University of Arkansas for Medical Sciences (UAMS) and Sacramento County have both recently reported [...]
Criminal HIPAA Violation for Former Huntington Hospital Employee
After accessing 12,925 patient records with permission, a former worker at Huntington Hospital in New York [...]
19,000 Individuals Made Aware that Breaches at University Hospital Newark May have Impacted their PHI
It has been discovered that the protected health information of thousands of patients of University Hospital [...]
Tens of Thousands of Professional Dental Alliance Patients Impacted in Phishing Attack on Business Associate
A group of dental clinics practices affiliated with the North American Dental Group, Professional Dental [...]
PHI Compromised in June Cyberattack on University Medical Center of Southern Nevada
An update has been released in relation to the University Medical Center of Southern Nevada (UMC) cyberattack [...]
Northwestern Memorial HealthCare and Renown Health Affected by Elekta Cyberattack
A cyberattack on a business associate of Chicago, IL-based Northwestern Memorial HealthCare and Reno, [...]
20/20 Hearing Care Network Data Breach Impacts over 3.2 Million People
Following the discovery of suspicious activity on their databases, the 20/20 Hearing Care Network has begun [...]
$40,000 Privacy Breach Penalty for Adventist Health Physicians Network
Simi Valley, California based Adventist Health Physicians Network has been directed to hand over $40,000 [...]
Healthcare Cyberattacks Doubled in 2020 According to IBM X-Force
An IBM X-Force report has revealed that the amount of healthcare cyberattacks doubled in 2020 with 28% of [...]
Privacy and Security of COVID-19 to be Protected by Public Health Emergency Privacy Act
Democratic senators introduced the Public Health Emergency Privacy Act on January 28, 2021 in order to [...]
51% Growth in Healthcare Industry Web Application Attacks During December
According to new research published by cybersecurity firm Imperva, there has been a major rise in healthcare [...]
Cyberattack on AspenPointe Affects 295,000
AspenPointe, based in Colorado Springs has revealed that it was impacted by a cyberattack during September [...]
Cybersecurity Impact of COVID-19 on Working Environment Explored in Survey
Before the COVID-19 pandemic the majority of businesses permitted a portion of the workforce to dedicate some [...]
MHealth App Developers and Cloud Services Providers have New Resources made Available by OCR
The Department of Health and Human Services’ Office for Civil Rights has revealed that it has made [...]
Lack of Encryption & Other HIPAA Flaws Leads to $1m HIPAA Penalty
The HHS’ Office for Civil Rights has sanctioned a $1,040,000 HIPAA fine on Lifespan Health System [...]
CVS Pharmacy and Walgreens Break-ins Compromises PHI
CVS Pharmacy is contacting some patients to inform them that some of their personal and protected health [...]
Two Recent Cyberattacks Result in $107,000 Stolen from Kentucky Employees’ Health Plan Members
The Commonwealth of Kentucky Personnel Cabinet has revealed that two data breaches took place between late [...]
Nigerian BEC Scammers Target Government Healthcare Agencies & COVID-19 Research Organizations
Business email compromise actors working out of Nigeria have been targeting government healthcare agencies, [...]
OCR Issues Guidance in relation to Filming and Access to Healthcare Facilities
The HHS’ Office for Civil Rights (OCR) has released a directive for healthcare providers to follow which [...]
82% of Public-Facing Exchange Servers Remain Susceptible to Actively Exploited Critical Vulnerability
On February Patch Tuesday, 2020, Microsoft made a patch available to address a critical vulnerability [...]
Hartford Healthcare and Saint Francis Ministries Suffer Phishing Attacks
The Saint Francis Ministries health system has revealed that the email account of one of its staff members [...]
Andrews Braces Hack May Have Compromised PHI of 16,600 Patients
The Sparks, NV orthodontics practice, Andrews Braces, has said that a ransomware attack took place on [...]
More than 113,000 Patients of Brandywine Urology Consultants Ransomware Attack
Delaware-based Brandywine Urology Consultants has made public that it suffered a ransomware attack on January [...]
COVID-19 Crisis: OCR Publishes Allowable Disclosures of PHI to First Responders
The U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) has made available [...]
COVID19 Pandemic Leads to Huge Spike in Cyber-Attacks Targeting WHO
An attorney for New York-based cybersecurity experts Blackstone Law Group has discovered that the World [...]
Coronavirus Pandemic: OCR Publishes Guidance on Telehealth and HIPAA
HHS’ Office for Civil Rights (OCR) has released guidance on telehealth and remote communications. This [...]
Webinar 03/18/20: Discover the Untold Benefits of HIPAA Compliance
If you are a HIPAA-covered organisation, exiting associate, or you hope to begin providing services to [...]
Healthcare Worker Arraigned on 430 Counts Following Criminal HIPAA Violation
A previous staff member of ACM Global Laboratories, part of Rochester Regional Health, has been accused of [...]
Healthcare Data Breach Report for January 2020 Published
The Department of Health and Human Services’ Office for Civil Rights were inundated during January with [...]
2018 Phishing Attack Impacted more Quest Health Systems Discovers Patients than First Thought
Health Quest, which is now an entity of Nuvance Health, has discovered the phishing attack impacted its [...]
SouthEast Eye Specialist Group Phishing Impacts 13,000 Patients
SouthEast Eye Specialist (SEES) Group located in Franklin, TN, is contacting 13,000 patients to make them [...]
49,351 Patients Impacts in Alomere Health Phishing Attack
Alexandria, MN-based Alomere Health is contacting around 50,000 patients to inform them that some of their [...]
Three-Year Insider Breach Identified by North Ottawa Community Health System
North Ottawa Community Health System (NOCH) has identified that a staff member at North Ottawa Community [...]
PHI of 10,000 Medicare Beneficiaries Exposed in CMS Blue Button 2.0 Coding Bug
The Centers for Medicare and Medicaid Services (CMS) has found that a bug in its Blue Button 2.0 API that [...]
Healthcare Data Breach Report for November 2019
In November 2019, 33 healthcare data breaches of 500 or more records were made known to the Department of [...]
Google and Alphabet on Ascension Partnership Questioned by Rep. Jayapal
Pressure is mounting on Google and its parent company Alphabet to share information about how the protected [...]
Ramsey County Data Breach Victim Number Increases from 600 to 118,000
Ramsey County has dramatically increased the number of individuals thought to be affected by an August 2018 [...]
Phishing Attack At Fraser Autism Center Affects 3,000 Patients
A phishing attack at Fraser Autism Center of Excellence has resulted in the protected health information [...]
Secretary of HHS Announces Limited HIPAA Waiver due to Hurricane Dorian
The Secretary of the Department of Health and Human Services (HHS), has declared a public health emergency in [...]
Half a Million Records Compromised in Puerto Rico Ransomware Attack
More than half a million records have been compromised in a ransomware attack on the Bayamón Medical Center [...]
Park DuValle Community Health Center Pays $70,000 in Ransomware Attack
Park DuValle Community Health Center has revealed that they were forced to pay hackers $70,000 to recover [...]
2019 See Introduction of New HIPAA Regulations
It is likely, given the Trump Administration’s policy of two regulations out for every new one introduced, [...]
Medical Student Sues Marshall University Hospital for Unauthorized Sharing of X-rays
A medical student has filed a lawsuit against Marshall University and Cabell Huntington Hospital claiming [...]
Break-in at Pardee UNC Health Exposes Patient Data
Pardee UNC Health Care has announced that patient data may have been compromised following a break-in at its [...]
Quest Diagnostics Reveals 12 Million Patients Affected by AMCA Data Breach
Almost 12 million patients of Quest Diagnostics have had their data compromised following a cybersecurity [...]
AMCA Data Breach Affects 7.7 Million LabCorp Patients
LabCorp has announced that the AMCA data breach has affected 7.7 million of their patients. Quest [...]
Health Quest Sends Notifications for 2018 Data Breach
Health Quest is in the process of sending breach notification letters to certain patients concerning a 2018 [...]
Communities Connected for Kids Notifying 501 Individuals of Data Breach
Communities Connected for Kids (CCK) is notifying 501 individuals that an unauthorized individual may have [...]
1,893 Bloodworks Northwest Notified of PHI Exposure
Bloodworks Northwest is notifying 1,893 patients that some of their protected health information (PHI) has [...]
Medical Oncology Hematology Consultants Patient Data Compromised in June 2018 Hacking Incident
Medical Oncology Hematology Consultants (MOHC) is notifying patients that their health data was compromised [...]
Cancer Treatment Centers of America Patient Information Compromised in Phishing Attack
A phishing attack on Cancer Treatment Centers of America (CTCA) has compromised patient protected health [...]
UMC Physicians Patient Data Uploaded to Unsecured Cloud Service
UMC Physicians are sending breach notifications to patients of UMC Southwest Gastroenterology following the [...]
Phishing Attack on Women’s Health USA Affects 17,000 Patients
A phishing attack at Women’s Health USA Inc. has compromised the PHI of 17,000 patients. An employee of [...]
Second Data Security Incident Affects Spectrum Health Lakeland Patients
Spectrum Health Lakeland has notified 1,100 patients that their PHI may have been compromised in a data [...]
American Baptist Homes of the Midwest Suffers Ransomware Attack
American Baptist Homes of the Midwest (ABHM) has provided breach notification letters to patients following a [...]
Most Common HIPAA Violations
The most often experienced HIPAA violations that have resulted in fines are the failure to complete a [...]
Misconfigured Elasticsearch Security Settings Exposes PHI of 137,000 Individuals
Approximately 137,000 individuals have had their data exposed online due to misconfigured security settings [...]
OCR Advises Healthcare Groups to Carry Out Gap Analysis
In its April 2018 cybersecurity newsletter, OCR lauds the benefits of completing a gap analysis along with a [...]
Doctor’s Management Service Inc. Suffers Ransomware Attack
Doctor’s Management Service Inc. is notifying patients of a data breach following a ransomware attack on [...]
Over 2,200 Patients Affected by Harbor Behavioural Health Security Incident
An unauthorised individual has compromised the PHI of over 2,200 patients after gaining access to Harbor [...]
Breach at Health Recovery Services Affects 20,000 Patients
A breach at Health Recovery Services has compromised the protected health information (PHI) of over 20,000 [...]
5,000 Metrocare Service Patients Affected by Phishing Attack
Over 5,000 patients of Metrocare Services have had their protected health information (PHI) comprised [...]
Estimating the Cost of a HIPAA Data Breach
Estimating the cost of a HIPAA data breach is not a streamlined process, at least not until a number of years [...]
HIPAA Compliance & Rackspace
Rackspace is conscious that by making its services available to healthcare groups, the company is classified [...]
What Happens if You Breach HIPAA Rules?
HIPAA requires covered groups to supply training to employees to make sure they are aware of HIPAA rules and [...]
HIPAA Compliant Text Messaging
Even though HIPAA does not specifically rule out sharing Protected Health Information (PHI) by text, a system [...]
HIPAA Compliance and Uber Health
Last month, Uber officially launched Uber Health – a service that allows you to set up transport for [...]
Texas Nurse Sacked Following Social Media HIPAA Breach
A nurse who was working at a Texas children’s hospital has been let go from her position after it was [...]
What is classified as Protected Health Information?
The Health Insurance Portability and Accountability Act (HIPAA) obligates covered bodies to maintain [...]
HIPAA Compliance & Google Voice
Google Voice is a widely used and intuitive telephony service that incorporates voicemail, voicemail [...]
How to Report a HIPAA Violation
It is important that all worker in the healthcare industry have a firm grasp of what a HIPAA violation is and [...]
Can Google Sheets be used in line with HIPAA Rules?
Under HIPAA Rules, healthcare groups must put in place security measures to ensure the confidentiality, [...]
Is Slack HIPAA Compliant?
To date, ascertaining whether or not the Slack is compliant with HIPAA legislation has proved difficult as it [...]
HIPAA Breaches of 2018: Largest Incidents Revealed
This post lists the largest healthcare data breaches of 2018: Healthcare data breaches that have lead to the [...]
Box & HIPAA Compliance
Box is a cloud storage and content management service that allows collaboration and file-sharing or users. [...]
Clearwater Identify Most Frequent Security Weaknesses in Healthcare
The company Clearwater have identified the most frequent security weaknesses in the healthcare sector. They [...]
$75,000 HIPAA Violation Fine Issued to McLean Hospital by Massachusetts Attorney General
A $75,000 HIPAA violation fine has been issued to McLean Hospital by Massachusetts Attorney General Maura [...]
Serious Phishing Threat and Importance of Security Awareness Training Highlighted in Results of Study
A large amount of employees are still being fooled by phishing emails, a new study has revealed. [...]
ComplianceHome is a registered trademark. Copyright © 2026 ComplianceHome. All rights reserved.