HIPAA Journal

JUNE 21, 2023

Onix Group, a Pennsylvania-based real estate development firm and provider of business management and consulting services, is being sued for failing to prevent a ransomware attack in which the hackers stole the protected health information of 320,000 individuals. The ransomware attack was detected by Onix Group on March 27.

Ransomware 92

Ransomware Fraud HIPAA 92

HIPAA Journal

JANUARY 31, 2023

San Andreas Regional Center – was filed in the Superior Court of California in response to the breach alleging the healthcare provider was negligent for failing to implement reasonable cybersecurity measures to protect against ransomware attacks, despite being aware of the high risk of attacks on the healthcare sector.

Ransomware 62

Ransomware Fraud Health Insurance HIPAA 62

HIPAA Journal

MAY 25, 2023

In April 2023, Point32Health, the second-largest health insurer in Massachusetts and the parent company of Tufts Health Plan and Harvard Pilgrim Health Care, announced it suffered a ransomware attack that resulted in system outages, including the systems that serviced members, accounts, brokers, and providers.

Ransomware 81

Ransomware Health Insurance Fraud HIPAA 81

HIPAA Journal

JUNE 8, 2023

a provider of call center and customer experience software technology to large enterprises, has recently confirmed that it fell victim to a ransomware attack on a limited portion of its network. The post Alvaria Confirms November 2022 Hive Ransomware Attack appeared first on HIPAA Journal. (formerly Aspect Software, Inc.),

Ransomware 52

Ransomware Fraud HIPAA Health Insurance 52

HIPAA Journal

JUNE 5, 2023

Multiple class action lawsuits have been filed against the city of Oakland in California over a ransomware attack and data breach that involved the theft of the personal and protected health information of 13,000 current and former employees. The ransomware attack is understood to have started with phishing emails.

Ransomware 57

Ransomware Fraud HIPAA 57

HIPAA Journal

NOVEMBER 21, 2022

The Wisconsin-based dermatology practice, Forefront Dermatology, has agreed to settle a class action lawsuit filed on behalf of patients whose protected health information (PHI) was compromised in a ransomware attack in late May 2021. The final approval hearing has been scheduled for March 1, 2023.

Ransomware 67

Ransomware Fraud HIPAA Licensing 67

HIPAA Journal

MAY 1, 2024

CommonSpirit Health suffered a ransomware attack on October 2, 2022, that affected more than 100 CommonSpirit Health facilities across the United States. CommonSpirit Health , alleged that the plaintiff suffered injuries as a result of the breach, including more than $3,000 in bank account fraud that led to the closure of her account.

Fraud 101

Fraud Ransomware HIPAA Health Insurance 101

HIPAA Journal

MARCH 30, 2023

Ransomware and phishing continue to be the biggest cybersecurity concerns for healthcare organizations according to the February 2023 Current and Emerging Healthcare Cyber Threat Landscape report from Health-ISAC. Ransomware was the biggest concern for 2022 and 2023 with phishing and spear phishing in second.

Ransomware 95

Ransomware Fraud Governance Medical Billing 95

HIPAA Journal

MAY 18, 2023

The breach was detected by NextGen on March 30, 2023, and the forensic investigation confirmed hackers had access to its network between March 29, 2023, and April 14, 2023. This was the second data breach to be reported by NextGen this year, with the earlier incident being a BlackCat ransomware attack.

Ransomware 117

Ransomware Fraud HIPAA 117

HIPAA Journal

MAY 17, 2023

In April 2023, the Money Message ransomware group announced it had breached the systems of PharMerica and its parent company, BrightSpring Health Services, and added both to its data leak site. That makes it the largest healthcare data breach to be reported by a single HIPAA-covered entity so far in 2023.

Ransomware 95

Ransomware HIPAA Fraud Health Insurance 95

HIPAA Journal

MARCH 3, 2023

The attack was conducted by the Sodinokibi ransomware group, which published some of the stolen data on its data leak site. Claims will also be accepted up to a maximum of $3,500 per claimant to cover documented, extraordinary losses that have not already been reimbursed, such as losses to fraud and identity theft.

Ransomware 81

Ransomware Fraud HIPAA 81

HIPAA Journal

FEBRUARY 15, 2023

The medical device manufacturer Electromed has proposed a $850,000 settlement to resolve claims related to a June 2021 ransomware attack and data breach involving the protected health information of 47,200 individuals. The deadline for objection to and exclusion from the settlement is March 2, 2023. A lawsuit – Lutz, et al.

Ransomware 85

Ransomware Fraud Licensing Health Insurance 85

HIPAA Journal

JUNE 15, 2023

Johns Hopkins University and Johns Hopkins Health System are investigating a May 31, 2023, cyberattack and data breach that targeted a widely used software tool. The security breach was discovered on April 4, 2023, and unauthorized access was immediately blocked. At this stage, it is unclear how many individuals have been affected.

Ransomware 99

Ransomware Health Insurance Fraud HIPAA 99

HIPAA Journal

FEBRUARY 8, 2024

The incident was detected on November 9, 2023. Cybersecurity experts were engaged to assist with the investigation, which confirmed that unauthorized individuals accessed certain systems on or before September 27, 2023, and encrypted certain files. It is not clear from the notification letters when the intrusion occurred.

Ransomware 83

Ransomware Electronic Medical Records Licensing Health Insurance 83

HIPAA Journal

JULY 6, 2023

UKG (Ultimate Kronos Group), a multinational provider of workforce management and human resources (HR) management services, has proposed a $6 million settlement to resolve claims related to a ransomware attack and data breach that was discovered in 2021. The deadline for exclusion from and objection to the settlement is September 18, 2023.

Ransomware 73

Ransomware COVID-19 Fraud HIPAA 73

HIPAA Journal

MAY 10, 2023

Suspicious activity was detected within its computer systems on February 1, 2023, and third-party cybersecurity experts were engaged to conduct a forensic analysis of the incident to determine the nature and scope of the attack. The investigation concluded on March 3, 2023, that files within its network were accessed.

Hospitals 97

Hospitals Ransomware Health Insurance Fraud 97

HIPAA Journal

MARCH 1, 2023

True Health New Mexico identified a security breach on October 5, 2021, with the investigation confirming that an unauthorized third party had gained access to its network and used ransomware to encrypt files. The deadline for objection to or exclusion from the settlement is April 14, 2023.

Fraud 98

Fraud Ransomware Health Insurance HIPAA 98

HIT Consultant

JANUARY 3, 2023

With the advent of ransomware-as-a-service combined with a lack of resources to investigate attacks in-house for healthcare organizations, elaborate and devastating cyber attacks against healthcare, specifically through business communication channels are likely to increase in scale and sophistication. .

Compliance 52

Compliance Ransomware Fraud Regulatory Compliance 52

HIPAA Journal

SEPTEMBER 13, 2023

A class action lawsuit has been filed against the student healthcare insurer UnitedHealthcare Services, which does business as UnitedHealthcare Student Resources, over its MOVEit Transfer data breach in May 2023. Ransom demands were issued, and payment was required to prevent the publication of stolen data on the group’s data leak site.

Ransomware 70

Ransomware Fraud Health Insurance HIPAA 70

HIPAA Journal

MARCH 13, 2023

According to the notification letter sent to the Maine Attorney General, unusual activity was detected within its internal network on January 28, 2023. Notification letters are now being mailed to all affected individuals.

Ransomware 98

Ransomware Fraud HIPAA 98

HIPAA Journal

AUGUST 2, 2023

The Chattanooga Heart Institute (CHI) in Tennessee has recently announced that it identified a cyberattack on its network on April 17, 2023. Notification letters will be sent to the affected individuals in the coming weeks and credit monitoring, fraud consultation, and identity theft restoration services will be offered.

Licensing 71

Licensing Electronic Medical Records Ransomware Health Insurance 71

Healthcare IT Today

JANUARY 19, 2024

According to the 2023 ForgeRock Breach Report , healthcare has consistently ranked as the most targeted industry by cybercriminals for the past five years. The 2023 Verizon Breach Report further highlights vulnerabilities with the healthcare sector, identifying web applications as the number one attack vector.

Fraud 97

Fraud Governance Ransomware Compliance 97

HIPAA Journal

JULY 12, 2023

District Court for the District of Maryland against Johns Hopkins University and Johns Hopkins Health System that allege a failure to properly secure and safeguard the protected health information of patients, resulting in the theft of their data by the Clop ransomware group.

Ransomware 76

Ransomware Fraud HIPAA 76

HIPAA Journal

SEPTEMBER 12, 2023

Seymour, IN-based Schneck Medical Center has settled a lawsuit with the Indiana attorney general, Todd Rokita, over a 2021 ransomware attack and data breach that affected 89,707 Indiana residents. Schneck Medical Center Compensates Patients for Losses Schneck Medical Center has also recently settled a consolidated class action lawsuit for $1.3

HIPAA 87

HIPAA Ransomware Health Insurance Fraud 87

HIPAA Journal

JUNE 23, 2023

A lawsuit has been filed against Intellihartx, LLC, (aka ITx Companies), over a cyberattack by the Clop ransomware group that exploited a vulnerability in Fortra’s GoAnywhere Managed File Transfer (MFT) solution. Affected individuals were notified about the data breach on June 9, 2023, more than 4 months after the discovery of the attack.

HIPAA 87

HIPAA Ransomware Fraud Health Insurance 87

HIPAA Journal

MAY 18, 2023

Larger healthcare providers may temporarily divert ambulances and cancel some appointments following a ransomware attack but do not typically halt operations, but smaller healthcare providers may be left with little alternative. The notification process was completed on April 10, 2023.

Ransomware 76

Ransomware Fraud HIPAA Health Insurance 76

HIPAA Journal

AUGUST 11, 2023

Advanced Persistent Threat (APT) actors are known to be actively exploiting 9 of the vulnerabilities, and 7 are being actively exploited by ransomware gangs. The rise of weaponized exploits demands immediate, collective action to safeguard not only our technological integrity but, ultimately, patient safety.”

Electronic Medical Records 69

Electronic Medical Records Ransomware Fraud HIPAA 69

Healthcare IT Today

SEPTEMBER 7, 2023

The stolen data is often used to commit fraud, identity and intellectual theft, espionage, blackmail, extortion, etc., In March 2023, for example, Cerebral, a telehealth platform that provides online therapy and medication management to millions of users, reported a healthcare data breach that impacted more than 3.1

Fraud 116

Fraud Ransomware Compliance Hospitals 116

HIPAA Journal

JANUARY 24, 2023

Time will tell whether this trend will continue in 2023, although the lull in data breaches appears to have continued so far this year with an atypically low number of breaches currently showing on the OCR data breach portal this month. million in 2023, although data breaches can be significantly more expensive.

HIPAA 113

HIPAA Ransomware Hospitals Fraud 113

HIT Consultant

AUGUST 13, 2023

billion in 2023. Here are seven identified cybersecurity vulnerabilities that can reveal a patient’s data and expose these healthcare organizations to fraud and fines: Limited budgets. Ransomware. MSPs and MSSPs can strengthen a healthcare organization’s cyber posture by locking down all points of compromise. Phishing scams.

Ransomware 97

Ransomware Fraud Health Insurance Public Health 97

HIPAA Journal

JULY 27, 2023

Norton Healthcare, a Kentucky-based operator of more than 140 clinics and hospitals in Kentucky and Southern Indiana, is facing a class action lawsuit over a May 2023 cyberattack and data breach. On July 21, 2023, a class action lawsuit was filed in U.S.

Ransomware 52

Ransomware Fraud Licensing Health Insurance 52

Healthcare IT Today

APRIL 25, 2024

For a healthcare entity, the data and information are viewed as extremely valuable as it includes PII as well as other health information that can be used for insurance fraud and identity theft. The cost of allowing a data breach to occur can cause an exponential financial impact on an organization.

Ransomware 112

Ransomware Compliance Fraud Governance 112

HIPAA Journal

APRIL 25, 2023

Santa Clara Family Health Plan Confirmed as Victim of Clop GoAnywhere Hack Santa Clara Family Health Plan has confirmed the 276,993-record data breach reported to the HHS’ Office for Civil Rights on March 30, 2023, was due to the hacking of Fortra’s GoAnywhere MFT solution by the Clop ransomware group.

Health Insurance 84

Health Insurance Public Health Ransomware Fraud 84

Hall Render

FEBRUARY 3, 2023

Daytona Beach medical office building/surgery center HCA Healthcare breaks ground on new freestanding ER in Orlando Lee Health’s new state-of-the-art bloodmobile hits the road Naples physician charged with Medicare fraud gives up license; enters guilty plea Nemours opens full-time office for children in Panama City with St.

US Department of Health and Human Services 40

US Department of Health and Human Services COVID-19 Nursing Homes Nurses 40

Hall Render

FEBRUARY 10, 2023

Physicians not returning Casper resident, needing surgery, may have to go elsewhere Column: Sheridan Memorial Hospital’s cardiac cath lab earns national accreditation The post Health Provider News – February 10, 2023 appeared first on Law Firm | Health Care Law Firm in the USA | Hall Render. How profitable are they?

US Department of Health and Human Services 40

US Department of Health and Human Services COVID-19 Nursing Homes Nurses 40

HIPAA Journal

JANUARY 30, 2023

This will be followed by the preconference basic training day on March 2, 2023. Advance registration is required and there are Early Bird Discounts available to HIPAA Journal readers who are able to register for the event before February 3, 2023.

US Department of Health and Human Services 85

US Department of Health and Human Services HIPAA Compliance Medicaid 85

Hall Render

MAY 17, 2024

NATIONAL A deep dive into health system and health plan Q1 earnings Amazon building ‘modern pharmacy’ of the future: Medical Officer Breaking down the FTC noncompete ban, its impact on healthcare CISA, HHS warn healthcare of Black Basta ransomware attacks CMS extends Medicaid waivers to 2025 Could providers be liable in Change outage?

Nurses 40

Nurses Nursing Homes Hospitals Ransomware 40