HIPAA Journal

SEPTEMBER 8, 2023

Just Kids Dental Suffers Ransomware Attack Acadia Health, LLC, doing business as Just Kids Dental, has started notifying 129,623 patients that some of their protected health information was stolen in an August 2, 2023, ransomware attack. The types of information involved varied from individual to individual.

Licensing 99

Licensing Ransomware Health Insurance HIPAA 99

HIPAA Journal

APRIL 30, 2024

On April 10, 2024, Livanova confirmed that the personal and protected health information of U.S. The affected individuals have been advised to monitor their credit reports and account statements and to be alert to unsolicited communications involving personal information. patients.

Ransomware 85

Ransomware Licensing Health Insurance HIPAA 85

HIPAA Journal

APRIL 23, 2024

A cybersecurity firm was engaged to investigate the disruption and confirmed that unauthorized individuals accessed its network and exfiltrated files containing the personal information of residents. It took more than 10 months (April 10, 2024) to determine the types of information involved and the number of individuals affected.

Ransomware 101

Ransomware Fraud Licensing HIPAA 101

HIPAA Journal

MAY 22, 2024

Superior Air-Ground Ambulance Service, a leading ambulance and EMS provider serving Illinois, Indiana, Michigan, Ohio, and Wisconsin, has confirmed that the protected health information of 858,238 patients was exposed or stolen in a cyberattack in May 2023.

Fraud 78

Fraud Licensing HIPAA Health Insurance 78

HIPAA Journal

NOVEMBER 8, 2023

Third-party forensics experts were engaged to investigate the breach and determined that its systems were compromised between September 1, 2023, and September 5, 2023, and during that time, files were exfiltrated that contained personal and protected health information.

Ransomware 98

Ransomware Licensing Health Insurance HIPAA 98

HIPAA Journal

APRIL 8, 2024

De Felice , around 5TB of data was stolen by the Medusa group including the protected health information of an estimated 37,700 patients. The investigation uncovered evidence of unauthorized access to files that contained patient information.

Ransomware 69

Ransomware Health Insurance Licensing HIPAA 69

Bill of Health

MARCH 9, 2024

By Susannah Baruch Concerned about privacy protections for pregnancy- and abortion-related health data in the post- Dobbs environment? It seems the CPC industry is collecting health information by “performing” HIPAA while operating under no legal obligation to protect the privacy of personal or health information.

HIPAA 250

HIPAA Licensing Health Insurance Compliance 250

HIPAA Journal

AUGUST 16, 2023

The information removed from its systems included names, addresses, dates of birth, Social Security numbers, driver’s license/State ID numbers, financial account information, payment card information, usernames/passwords, health insurance information, and medical information.

Licensing 70

Licensing Health Insurance HIPAA Public Health 70

HIPAA Journal

JULY 5, 2022

University Pediatric Dentistry in Buffalo, NY, has started notifying 6,843 patients that some of their protected health information has been exposed in an email security incident. A limited number of patients also had financial account information exposed.

Licensing 101

Licensing Electronic Medical Records Health Insurance Hospitals 101

HIPAA Journal

OCTOBER 17, 2022

Phoenix, AZ-based Valle del Sol Community Health has notified 70,268 patients that some of their protected health information has been exposed. Valle de Sol said the investigation indicated unauthorized individuals had access to files containing sensitive patient data and that patient information may have been acquired.

Health Insurance 115

Health Insurance Licensing Fraud HIPAA 115

HIPAA Journal

MAY 2, 2023

United HealthCare (UHC) has started notifying certain members that some of their protected health information may have been disclosed to unauthorized individuals as a result of credential stuffing attacks on the UHC mobile application. No Social Security numbers, financial information, or driver’s license numbers were exposed.

Licensing 95

Licensing Health Insurance Hospitals HIPAA 95

HIPAA Journal

MAY 2, 2023

NYSARC Columbia County Chapter Notifies Individuals About July 2022 Ransomware Attack NYSARC Columbia County Chapter (COARC) has started notifying certain individuals that some of their protected health information has potentially been obtained by unauthorized individuals in a July 2022 ransomware attack.

Ransomware 95

Ransomware Licensing Health Insurance HIPAA 95

HIPAA Journal

NOVEMBER 16, 2022

Unauthorized individuals have gained access to the email system of the Administrative Fund of the Detectives’ Endowment Association of the Police Department of the City of New York (NYCDEA) and potentially viewed or obtained the protected health information of 21,544 individuals.

HIPAA 88

HIPAA Licensing Health Insurance Fraud 88

HIPAA Journal

APRIL 22, 2024

Knowles Smith & Associates, which does business as Village Family Dental and operates 7 dentistry offices in North Carolina, recently notified 240,214 current and former patients that some of their protected health information was exposed in a November 2023 cyberattack.

HIPAA 103

HIPAA Licensing Health Insurance 103

HIPAA Journal

MARCH 10, 2022

A round-up of 6 cyberattacks that have recently been reported by healthcare providers and business associates that resulted in the exposure and possible theft of patients’ protected health information. The files exfiltrated from its systems included the protected health information of patients.

Ransomware 123

Ransomware Licensing Health Insurance Hospitals 123

HIPAA Journal

MARCH 29, 2023

A third-party computer forensics firm was engaged to assist with the investigation and determined that there was unauthorized access to files containing patient information from January 20, 2023. OU Health – Stolen Laptop Computer OU Medicine Inc. Notification letters were mailed to the affected individuals on March 24, 2023.

Hospitals 100

Hospitals Ransomware Licensing Health Insurance 100

HIPAA Journal

MAY 17, 2022

The review of the files revealed they mostly contained protected health information such as names, addresses, medical information, and/or health insurance information. NuLife said no reports have been received to date to indicate any patient information has been misused.

Health Insurance 94

Health Insurance Licensing Ransomware HIPAA 94

HIPAA Journal

AUGUST 2, 2023

The administrative service provider said suspicious activity was detected within its network in early December 2022, and the forensic investigation confirmed on December 15, 2022, that an unauthorized third party accessed parts of its computer network where personal health information was stored.

Licensing 71

Licensing Electronic Medical Records Ransomware Health Insurance 71

HIPAA Journal

JULY 3, 2023

Unauthorized individuals gained access to its network and exfiltrated files containing sensitive patient information. Precision Imaging Centers said no evidence of misuse of personal information has been detected. Efforts were then made to contact the affected clients and obtain up-to-date contact information.

Health Insurance 84

Health Insurance Licensing Ransomware HIPAA 84

HIPAA Journal

MARCH 25, 2022

Ultimate Care said no reports have been received that indicate there has been any misuse of patient information; however, as a precaution against identity theft and fraud, individuals whose Social Security numbers were impacted have been offered complimentary one-year memberships with a credit monitoring service.

Health Insurance 109

Health Insurance Licensing Ransomware Fraud 109

Bill of Health

APRIL 4, 2024

The main federal health privacy law, the Health Insurance Portability and Accountability Act of 1996 (HIPAA) applies only to “covered entities” like health insurers, claims- processing clearinghouses, and health care providers and their business associates, and only to a subset of protected health care information.

FDA 282

FDA Regulatory Compliance Malpractice Health Insurance 282

HIPAA Journal

JUNE 21, 2023

Atlanta Women’s Health Group, P.C., has recently confirmed that the protected health information of up to 33,839 current and former patients has been exposed and potentially stolen in an April 2023 cyberattack. Around 5% of the affected individuals also had their financial information stolen.

Health Insurance 84

Health Insurance Licensing HIPAA Medicare 84

HIPAA Journal

FEBRUARY 8, 2024

Azura Vascular Care, a Pennsylvania-based operator of 70 outpatient vascular centers and ambulatory surgery centers in 25 states and Puerto Rico, notified the HHS’ Office for Civil Rights last month about a cybersecurity incident involving the protected health information of 348,000 patients.

Ransomware 83

Ransomware Electronic Medical Records Licensing Health Insurance 83

HIPAA Journal

JUNE 8, 2023

The Iowa Department of Health and Human Services has announced there have been three separate breaches of the protected health information of Iowa Medicaid recipients in the past two months – two hacking incidents and an impermissible disclosure, all three of which involved third-party contractors.

Medicaid 80

Medicaid Medicaid Ransomware Health Insurance 80

HIPAA Journal

SEPTEMBER 9, 2022

Birmingham, AL-based Henderson & Walton Women’s Center (HWWC) has recently notified 34,306 patients that some of their protected health information may have been compromised as a result of a hacker gaining access to the email account of one of its employees. The information exposed varied from patient to patient.

Licensing 101

Licensing Health Insurance Fraud HIPAA 101

HIPAA Journal

JUNE 30, 2023

On April 29, 2023, it was confirmed that files had been exfiltrated that included patient information such as names, dates of birth, addresses, Social Security numbers, driver’s license numbers, and clinical information, such as provider names, dates of service, and/or diagnoses.

Licensing 91

Licensing Health Insurance Records Management HIPAA 91

HIPAA Journal

JULY 14, 2022

The affected email accounts included names, Social Security numbers, driver’s licenses, financial account information, usernames and passwords, passport numbers, biometric data, medical information, health insurance information, electronic/digital signatures, and employer-assigned identification numbers.

Licensing 101

Licensing Health Insurance Ransomware HIPAA 101

MedTrainer

MAY 7, 2024

We’ll walk you through the steps in enrolling your providers with UnitedHealthcare, the information and documents you need, and the best practices to follow. Payer enrollment is a crucial step that allows healthcare providers to participate in the network of a specific insurance payer.

Malpractice 52

Malpractice Licensing Medicaid Medicaid 52

HIPAA Journal

DECEMBER 20, 2022

Work Health Solutions, a San Jose, CA-based occupational health services provider, has confirmed that the protected health information of 13,157 individuals has been exposed and potentially obtained by unauthorized individuals who had access to an employee email account between February 16, 2-022 and March 24, 2022.

Health Insurance 91

Health Insurance Licensing Hospitals Fraud 91

HIPAA Journal

DECEMBER 14, 2022

CFA was informed about the breach on June 23, 2022. One of the compromised email accounts was determined to contain the protected health information of CFA members, including names, addresses, birth dates, Social Security numbers, health insurance information, medical information, and billing and claims information.

Health Insurance 110

Health Insurance HIPAA Licensing 110

HIPAA Journal

JANUARY 13, 2023

The affected system contained billing information that was potentially accessed and obtained in the attack. A review of the email account confirmed the following types of information had been exposed: names, dates of birth, diagnoses, treatment information, and provider information.

Health Insurance 106

Health Insurance Licensing HIPAA Hospitals 106

HIPAA Journal

JANUARY 9, 2023

Third-party cybersecurity professionals were engaged to investigate the breach, with the investigation concluding on November 7, 2022, that protected health information was present in the compromised email accounts and may have been accessed or obtained. That information was found and forwarded to a third-party email account.

Licensing 109

Licensing HIPAA Health Insurance Governance 109

HIPAA Journal

JULY 4, 2023

Murfreesboro Medical Clinic & SurgiCenter (MMC) in Tennessee has recently confirmed that the protected health information of more than half a million patients was compromised in what it describes as “a series of attacks on our network and IT systems,” which were discovered on or around April 24, 2023.

Medicaid 72

Medicaid Medicaid Health Insurance Licensing 72

HIPAA Journal

AUGUST 2, 2023

Allegheny County in Pennsylvania has recently confirmed that the protected health information of up to 689,686 individuals was compromised in a May 2023 hacking incident by the Clop threat group. Cognisight was informed about the hacking incident on May 31, 2023, and its forensic investigation of the incident concluded on June 5, 2023.

Licensing 87

Licensing HIPAA Health Insurance 87

HIPAA Journal

FEBRUARY 16, 2022

The investigation confirmed its electronic medical record system and other clinical systems were not compromised in the attack; however, on January 13, 2022, Philadelphia FIGHT discovered the attacker had accessed non-clinical systems that housed files containing the protected health information of around 15,000 patients.

Electronic Medical Records 101

Electronic Medical Records Health Insurance Licensing HIPAA 101

HIPAA Journal

NOVEMBER 8, 2022

Vision, has recently confirmed that the information of patients at several entities within its network has been exposed. Nationwide Optical Group was informed about the breach and requested U.S. No further information was subsequently provided about any dark web detections. USV Optical, a subsidiary of U.S.

Licensing 70

Licensing Health Insurance HIPAA 70

HIPAA Journal

AUGUST 3, 2022

Fast Track Urgent Care, a network of urgent healthcare clinics in Florida, has confirmed that 258,411 individuals have had their protected health information exposed and potentially stolen in a ransomware attack on billing and practice management vendor, PracticeMax.

Ransomware 107

Ransomware Health Insurance Licensing HIPAA 107