HIPAA Journal

SEPTEMBER 12, 2023

Schneck Medical Center has agreed to pay a penalty of $250,000 to resolve alleged violations of the Health Insurance Portability and Accountability Act (HIPAA) and state laws and will implement additional safeguards to prevent further data breaches.

HIPAA 85

HIPAA Ransomware Health Insurance Fraud 85

HIPAA Journal

APRIL 21, 2023

Point32 Health, the second-largest health insurer in the state of Massachusetts, has announced it has experienced a ransomware attack that has resulted in system outages, including systems that are used to service its members, accounts, brokers, and providers. Tufts Health Plan members are not understood to have been affected.

Health Insurance 55

Health Insurance Ransomware HIPAA Medicare 55

HIPAA Journal

AUGUST 10, 2023

The Ottumwa Fire Department in Iowa has recently fired employees for alleged violations of the HIPAA Rules and other misconduct. Affected individuals were notified on August 4, 2023. For the research study, the data was published on the tool on February 25, 2018, and for the quality improvement project, on January 14, 2023.

HIPAA 70

HIPAA Ransomware Licensing Health Insurance 70

MedTrainer

FEBRUARY 29, 2024

It’s bad enough when a healthcare organization exposes patient protected health information (PHI). But, it can get worse if employees aren’t familiar with their organization’s HIPAA incident response plan. There are countless such cases every year even though it is relatively easy to create a HIPAA incident response plan.

HIPAA 52

HIPAA Compliance Health Insurance Compliance Officers 52

HIPAA Journal

FEBRUARY 3, 2023

The HHS’ Office for Civil Rights has announced its second financial penalty of 2023 to resolve alleged violations of the Health Insurance Portability and Accountability Act (HIPAA). Phoenix, AZ-based Banner Health is one of the largest non-profit health systems in the United States.

HIPAA 83

HIPAA Health Insurance Compliance Hospitals 83

HIPAA Journal

APRIL 25, 2024

City of Hope National Medical Center identified suspicious activity within its network on October 13, 2023, and the forensic investigation confirmed there had been unauthorized access by a third party between September 19, 2023, and October 12, 2023.

Fraud 103

Fraud Health Insurance Licensing HIPAA 103

Total HIPAA

MARCH 22, 2023

Insurance agents who handle protected health information (PHI) are required to comply with the Health Insurance Portability and Accountability Act (HIPAA). Failure to comply with HIPAA regulations can result in severe consequences for insurance agents and their clients. Enforcement Highlights.”

US Department of Health and Human Services 52

US Department of Health and Human Services HIPAA Compliance Health Insurance 52

Total HIPAA

MAY 19, 2022

Insurance agents who handle protected health information (PHI) are required to comply with the Health Insurance Portability and Accountability Act (HIPAA). One way to ensure compliance is to undergo a HIPAA compliance audit. It’s important for insurance agents to be prepared for a HIPAA compliance audit.

HIPAA 52

HIPAA US Department of Health and Human Services Compliance Health Insurance 52

HIT Consultant

MARCH 13, 2024

Investigation Focuses on HIPAA Compliance The OCR enforces the Health Insurance Portability and Accountability Act (HIPAA) Privacy, Security, and Breach Notification Rules. However, the agency reminds them of their obligations under HIPAA, including: Maintaining valid business associate agreements with Change Healthcare.

Ransomware 116

Ransomware HIPAA Compliance Health Insurance 116

HIPAA Journal

OCTOBER 21, 2022

There are – and always have been – gaps in HIPAA and, after more than a quarter of a century, some have yet to be addressed. Most of the gaps in HIPAA are attributable to omissions from the original Act, provisions of HIPAA and HITECH that have never been enacted, and the increasing use of technology in healthcare.

HIPAA 95

HIPAA Compliance Medicare Medicare 95

HIPAA Journal

APRIL 29, 2024

Berry, Dunn, McNeil & Parker, LLC (BerryDunn) provides health data analytics services to healthcare providers, health insurers, and government regulatory and healthcare policy agencies and its clients provide BerryDunn with personal and health data to allow the firm to perform its contracted services.

Health Insurance 91

Health Insurance Health Analytics HIPAA Medicaid 91

HIPAA Journal

NOVEMBER 15, 2022

The updated law will take effect on May 2, 2023. The updated definition of personal information now includes medical information, health insurance information, and usernames and passwords. The post Pennsylvania Updates Data Breach Notification Law appeared first on HIPAA Journal.

Health Insurance 130

Health Insurance HIPAA 130

AIHC

AUGUST 3, 2023

Artificial Intelligence and the Health Insurance Portability & Accountability Act Written by: Joanne Byron , BS, LPN, CCA, CHA, CHCO, CHBS, CHCM, CIFHA, CMDP, COCAS, CORCM, OHCC, ICDCT-CM/PCS This is the fourth article in our Artificial Intelligence and compliance series. In March 2023, a security breach occurred.

HIPAA 52

HIPAA Compliance Health Insurance Doctors 52

Total HIPAA

MARCH 23, 2022

Are you an insurance agent who handles protected health information (PHI)? If so, you must comply with the Health Insurance Portability and Accountability Act (HIPAA) when it comes to marketing and communications. Sources: Health Insurance Portability and Accountability Act of 1996 (HIPAA), Pub.

HIPAA 52

HIPAA Compliance Health Insurance 52

Total HIPAA

MAY 9, 2022

Insurance agents who handle protected health information (PHI) are required to comply with the Health Insurance Portability and Accountability Act (HIPAA). One important aspect of HIPAA compliance is ensuring that all staff members receive appropriate training on HIPAA regulations.

HIPAA 52

HIPAA US Department of Health and Human Services Compliance Health Insurance 52

HIPAA Journal

SEPTEMBER 7, 2023

El Centro Del Barrio, dba CentroMed in San Antonio, TX, is facing at least two class action lawsuits over a June 2023 cyberattack in which hackers gained access to the personal and protected health information (PHI) of 350,000 patients. The affected individuals were notified by mail on August 11, 2023.

HIPAA 85

HIPAA Health Insurance Fraud 85

HIPAA Journal

APRIL 22, 2024

University of Wisconsin Hospitals and Clinics Authority Email Account Breach The University of Wisconsin Hospitals and Clinics Authority (UW Health) recently provided an update on a security incident that was detected in late 2023. 20, 2023, and Dec. 20, 2023, and Dec.

HIPAA 95

HIPAA Hospitals Health Insurance 95

Healthcare IT Today

MARCH 24, 2023

According to the company, which just released a letter outlining the nature of the data issue, Cerebral discovered a breach on January 3, 2023. Its leaders found that the tracking technology used to mine user data had disclosed information to third parties and subcontractors.

HIPAA 81

HIPAA Health Insurance Governance Telemedicine 81

HIPAA Journal

OCTOBER 21, 2022

A pharmaceutical sales rep has pleaded guilty to conspiring to commit healthcare fraud and wrongfully disclosing and obtaining patients’ protected health information in an elaborate healthcare fraud scheme involving criminal HIPAA violations. He is due to be sentenced on Feb.

Fraud 59

Fraud HIPAA FDA Health Insurance 59

The Health Law Firm

MAY 8, 2023

Board Certified by The Florida Bar in Health Law On April 12, 2023, the United States Department of Health and Human Services (HHS), through its Office for Civil Rights, proposed a rule to strengthen the protections under the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule.

HIPAA 40

HIPAA Health Insurance 40

Medisys Compliance

JANUARY 30, 2023

HIPAA: The Health Insurance Portability and Accountability Act( HIPAA) is a federal law that establishes the national standards for protecting the privacy and security of individuals’ personal health information ( PHI). We at Medisys Data Solutions understand the importance of HIPAA compliance.

Compliance 52

Compliance Medical Billing Medical Billing Outsourcing HIPAA 52

HIPAA Journal

JUNE 27, 2023

In March 2023, Atlantic General Hospital notified the Maine Attorney General that it had fallen victim to a ransomware attack in which the protected health information of 30,704 individuals was exposed; however, the ransomware attack was far more extensive than was previously thought and the total has been upwardly revised to 136,981 individuals.

Ransomware 91

Ransomware Hospitals Health Insurance HIPAA 91

HIPAA Journal

MARCH 29, 2024

In February, Harvard Pilgrim Health Care revised the total number of individuals affected by an April 2023 ransomware attack, increasing the total by more than 81,000 to 2,632,275 individuals. The post Harvard Pilgrim Health Care Increases Ransomware Victim Count to 2.86 Million appeared first on HIPAA Journal.

Ransomware 64

Ransomware HIPAA Health Insurance 64

HIPAA Journal

SEPTEMBER 8, 2023

A security breach was detected on March 5, 2023, and systems were immediately taken offline to prevent further unauthorized access. A forensic investigation was initiated to determine the nature and scope of the attack, which confirmed there had been unauthorized access to its systems between February 3, 2023, and March 5, 2023.

Licensing 96

Licensing Ransomware Health Insurance HIPAA 96

HIPAA Journal

MAY 11, 2023

The deadline for exclusion from or objection to the settlement is June 5, 2023. Claims must be submitted by July 5, 2023, and the final approval hearing for the settlement has been scheduled for August 28, 2023. Million Settlement to Resolve Data Breach Lawsuit appeared first on HIPAA Journal.

HIPAA 84

HIPAA Health Insurance Licensing Hospitals 84

HIPAA Journal

AUGUST 2, 2023

Allegheny County in Pennsylvania has recently confirmed that the protected health information of up to 689,686 individuals was compromised in a May 2023 hacking incident by the Clop threat group. Cognisight was informed about the hacking incident on May 31, 2023, and its forensic investigation of the incident concluded on June 5, 2023.

Licensing 87

Licensing HIPAA Health Insurance 87

HIPAA Journal

APRIL 8, 2024

The leaked data includes patient names, dates of birth, phone numbers, email addresses, medical records, Social Security numbers, copies of passports and driver’s licenses, health insurance information, and company data. The investigation uncovered evidence of unauthorized access to files that contained patient information.

Ransomware 67

Ransomware Health Insurance Licensing HIPAA 67

HIPAA Journal

SEPTEMBER 12, 2023

These technologies have enabled better care and greater patient access to health information, but the health data collected, stored, and transmitted via these technologies largely falls outside the protection of HIPAA. Any new regulations or updates to HIPAA will need to be enforced, and that is also likely to create challenges.

HIPAA 96

HIPAA Health Insurance Governance 96

HIPAA Journal

JUNE 15, 2023

Trinity Health offered affected individuals complimentary credit monitoring services for 12 months. The lawsuit seeks class action status, a jury trial, an award of damages, and funds to cover a lifetime of credit monitoring services and identity theft insurance for the plaintiff and class members.

HIPAA 93

HIPAA Health Insurance 93

HIPAA Journal

JULY 7, 2023

The security breach was detected on May 11, 2023, with unauthorized access occurring between May 10, 2023, and May 13, 2023. Notification letters started to be mailed to affected individuals on June 29, 2023. The investigation also confirmed that files had been exfiltrated from its network on March 7, 2023.

Licensing 90

Licensing HIPAA Health Insurance Governance 90

HIPAA Journal

APRIL 29, 2024

The Federal Trade Commission (FTC) issued a final rule on April 26, 2024, that updates the FTC Health Breach Notification Rule. With the increasing use of health apps and connected devices, the updated HBNR will ensure it keeps pace with changes in the health marketplace.”

HIPAA 89

HIPAA Health Insurance Compliance 89

HIPAA Journal

APRIL 26, 2024

The breach was detected on June 20, 2023, and it was determined that patient data may have been accessed or acquired by the unauthorized third party, although no specific evidence of data access or data theft was identified. County Department of Health Services Email Accounts appeared first on HIPAA Journal.

HIPAA 99

HIPAA Health Insurance 99

HIPAA Journal

JUNE 16, 2023

Commonwealth Health Physician Network-Cardiology, aka Great Valley Cardiology in Scranton, PA, has notified 181,764 current and former patients about a cyberattack and data breach that was discovered on April 13, 2023. The cyberattack was detected by its threat detection system on February 20, 2023.

Medicaid 79

Medicaid Medicaid HIPAA Health Insurance 79

HIPAA Journal

MARCH 29, 2023

The attack was detected on January 29, 2023, when files were discovered to have been encrypted. A third-party computer forensics firm was engaged to assist with the investigation and determined that there was unauthorized access to files containing patient information from January 20, 2023.

Hospitals 96

Hospitals Ransomware Licensing Health Insurance 96

HIPAA Journal

FEBRUARY 8, 2024

Azura Vascular Care, a Pennsylvania-based operator of 70 outpatient vascular centers and ambulatory surgery centers in 25 states and Puerto Rico, notified the HHS’ Office for Civil Rights last month about a cybersecurity incident involving the protected health information of 348,000 patients. The incident was detected on November 9, 2023.

Ransomware 79

Ransomware Electronic Medical Records Licensing Health Insurance 79

HIPAA Journal

AUGUST 16, 2023

On March 9, 2023, a ransom note was detected within its computer environment that had been placed there by an unauthorized individual. The forensic investigation confirmed that an unauthorized individual had access to its network between February 2, 2023, and March 9, 2023.

Licensing 71

Licensing Health Insurance HIPAA Public Health 71

HIPAA Journal

JUNE 15, 2023

Johns Hopkins University and Johns Hopkins Health System are investigating a May 31, 2023, cyberattack and data breach that targeted a widely used software tool. The security breach was discovered on April 4, 2023, and unauthorized access was immediately blocked. Notifies 24,400 Individuals About Data Breach iSpace, Inc.,

Ransomware 96

Ransomware Health Insurance Fraud HIPAA 96