Compliancy Group

AUGUST 19, 2022

On Friday afternoon, July 15, 2022, the Department of Health and Human Services Office for Civil Rights announced 11 enforcement actions against healthcare providers across the country for alleged violations of the HIPAA Privacy Rule right of access provisions. Let’s Simplify Compliance Avoid HIPAA violation fines. Learn More! ×

HIPAA 52

HIPAA COVID-19 Compliance Health Insurance 52

HIPAA Journal

JUNE 16, 2022

The HIPAA Security Rule requires HIPAA-regulated entities to conduct a comprehensive, organization-wide risk analysis to identify the risks and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information (ePHI). Risk analyses/assessments are vital for HIPAA compliance.

HIPAA 93

HIPAA Compliance 93

HIPAA Journal

JANUARY 16, 2023

Only one other year has seen a fall in recorded data breaches (2014). HIPAA Journal has been unable to obtain information on two of those breaches. HIPAA-regulated entities should also ensure that their password management practices are kept up to date. December Data Breaches by HIPAA Regulated Entity. California.

Ransomware 113

Ransomware HIPAA Hospitals 113

Total HIPAA

JULY 21, 2020

HIPAA compliance for employers is a complicated and nuanced topic. Though you may believe you’re not affected by HIPAA, many groups usually have access to more PHI than they realize. In this article, we outline some of the issues that you may face as a benefits specialist and the connection between ERISA and HIPAA.

HIPAA 40

HIPAA Health Insurance Compliance 40

HIPAA Journal

MARCH 31, 2023

District Court Judge has denied class certification in a long-running legal battle against CareFirst BlueCross BlueShield over its 2014 data breach that affected 1.1 The post Judge Denies Class Certification in CareFirst Data Breach Lawsuit appeared first on HIPAA Journal. million plan members.

Fraud 88

Fraud HIPAA 88

HIPAA Journal

MARCH 28, 2024

Fernald Developmental Center campus in Waltham, MA, which was sold to the city of Waltham in 2014. The documents had been improperly stored in the buildings since 2014 and many had degraded, so it was not possible to tell the exact types of information that had been exposed.

Hospitals 72

Hospitals Ransomware HIPAA Licensing 72

Healthcare It News

SEPTEMBER 21, 2023

According to one 2014 survey, 10% of patients distrusted health technology, Liederman said, but another recent survey found 87% of patients are unwilling to divulge all their medical information. " To safely address insider snooping you have to record all the views and actions, which HIPAA requires anyway.

Governance 259

Governance HIPAA Ransomware Licensing 259

HIPAA Journal

APRIL 11, 2022

The FDA first released final guidance on premarket expectations for medical devices in 2014, then updated and released draft guidance in 2018. The post FDA Releases Updated Guidance on Medical Device Cybersecurity appeared first on HIPAA Journal. The FDA will then work on a final version of the guidance.

FDA 124

FDA HIPAA 124

McGuire Wood

FEBRUARY 9, 2022

Founded in 2005, the company’s solution, The Guard, is intended to help businesses meet HIPAA compliance requirements. and founded in 2014, pursues investments in healthcare IT and other technology service and software companies. Compliancy Group , based in Greenlawn, N.Y., Aldrich Capital Partners , based in Tower Vienna, Va.,

Compliance 52

Compliance HIPAA 52

HIPAA Journal

FEBRUARY 28, 2022

The NIST Cybersecurity Framework was released in 2014 to help public and private sector organizations implement cybersecurity standards and best practices to improve their cybersecurity posture, better defend against cyber threats, and quickly identify and respond to cyberattacks in progress to limit the harm that can be caused.

HIPAA 129

HIPAA 129

HIPAA Journal

MARCH 23, 2023

The affected individuals had created an online PPS account between July 2014 and January 13, 2023. The post SundaySky Cyberattack Impacts 37,000 Health Plan Members appeared first on HIPAA Journal. On January 10, 2023, PPS discovered that the names and email addresses of 82,466 patients had been shared with the Kroger Co.

Licensing 85

Licensing HIPAA 85

HIPAA Journal

JUNE 23, 2022

The lawsuit was filed on behalf of 27,000 employees affected by a February 2014 data breach. The post University of Pittsburgh Medical Center Settles Data Breach Lawsuit for $450,000 appeared first on HIPAA Journal. Last year, UPMC settled a long-running lawsuit for $2.65

HIPAA 91

HIPAA 91

HIT Consultant

NOVEMBER 10, 2022

HIPAA-Compliant Patient Engagement Solutions Platform. Since its launch in 2014, AngelEye has built a diverse portfolio of resources designed to support the current and future needs of the highly specialized NICU and PICU.

HIPAA 52

HIPAA Hospitals 52

HIPAA Journal

AUGUST 16, 2022

HIPAA Journal reported on the incident in September 2021. Intermedix Corporation worked with Lee County Emergency Medical Services for almost 15 years, with the contract terminating in September 2014. On August 31, 2021, Bleeping Computer was made aware of the data leak and made multiple attempts to notify United Health Centers.

Ransomware 96

Ransomware HIPAA Licensing Governance 96

HIPAA Journal

MARCH 8, 2022

The report shows how adversaries stepped up their attacks on the healthcare industry from 2014 through 2017. In 2014, Boston Children’s Hospital suffered a major distributed Denial of Service (DDoS) attack, there was a massive cyberattack on Anthem Inc.

Ransomware 124

Ransomware COVID-19 HIPAA World Health 124

HIPAA Journal

AUGUST 9, 2023

TGH experienced a data breach in 2014 which was reported to the HHS’ Office for Civil Rights as an unauthorized electronic medical record access incident affecting 675 patients. Million Record Data Breach appeared first on HIPAA Journal. The lawsuit also points out that this is not the first data breach to have occurred at TGH.

Hospitals 68

Hospitals Electronic Medical Records Health Insurance HIPAA 68

HIPAA Journal

MAY 4, 2022

The post HHS Information Security Program Rated ‘Not Effective’ appeared first on HIPAA Journal. The audit was conducted at five of the 12 operating divisions of the HHS, although OIG did not state which five divisions were audited. The HHS concurred with all OIG recommendations.

HIPAA 132

HIPAA Compliance 132

Hall Render

APRIL 28, 2022

A North Carolina dental practice (“Practice”) has been fined $50,000 following a Notice of Final Determination regarding a violation of the HIPAA Privacy Rule. Comparing social media activities to peer entities to determine what social media practices are acceptable is not a viable strategy to ensure compliance with HIPAA.

HIPAA 75

HIPAA Compliance 75

Health Populi

JUNE 10, 2021

.” Health Populi’s Hot Points: HIPAA, the Health Insurance Portability and Accountability Act, was signed into law in 1996 by President Bill Clinton. This week, Ken Mandl and Eric Perakslis co-wrote an essay in The New England Journal of Medicine on HIPAA and the “leak of ‘deidentified’ EHR data.”

HIPAA 173

HIPAA COVID-19 Health Insurance Health Outcomes 173

HIPAA Journal

JUNE 3, 2022

Back in 2014, the hospital suffered a series of attacks that disrupted its systems for more than a week. The post FBI Thwarted ‘Despicable’ Cyberattack on Boston Children’s Hospital appeared first on HIPAA Journal. Boston Children’s Hospital is no stranger to cyberattacks.

Hospitals 92

Hospitals Ransomware HIPAA 92

HIPAA Journal

MARCH 8, 2023

An investigation was launched when the unauthorized access was detected which revealed the unauthorized access had been occurring over a period of 9 years, starting in 2014. The post Asante Discovers 9 Years of Unauthorized Medical Record Access by a Physician appeared first on HIPAA Journal.

Electronic Medical Records 70

Electronic Medical Records Doctors Fraud Licensing 70

HIPAA Journal

FEBRUARY 15, 2023

GootLoader is a malware loader first identified in 2014 that is now one of the biggest malware threats. The post Healthcare Sector Warned About Increase in GootLoader Malware Infections appeared first on HIPAA Journal.

HIPAA 93

HIPAA 93

HIPAA Journal

OCTOBER 31, 2022

In 2014, OpenSLL discovered a critical vulnerability dubbed Heartbleed, which could be exploited to obtain passwords or encryption keys. The post Patch Due for Release on November 1, 2022 to Fix Critical OpenSLL Vulnerability appeared first on HIPAA Journal.

Public Health 65

Public Health HIPAA 65

HIPAA Journal

JUNE 8, 2022

Emotet was first detected in 2014 and was initially a banking Trojan; however, the malware has been updated over the years and has had new features added. The post HC3 Warns Healthcare Sector About Growing Threat from Emotet Malware appeared first on HIPAA Journal.

Ransomware 105

Ransomware HIPAA Governance 105

HIPAA Journal

FEBRUARY 17, 2023

HIPAA Journal is conducting interviews with healthcare professionals, compliance professionals, and industry service providers to find out more about how their experiences with HIPAA, their successes, and the challenges they have and continue to face with HIPAA compliance. When did you first get involved with HIPAA compliance?

HIPAA 52

HIPAA Compliance Licensing Hospitals 52

HIPAA Journal

JULY 25, 2022

A Major DDoS attack was conducted on Boston Children’s Hospital in April 2014 over the course of a week by a hacker in response to a child custody issue. The post HC3 Warns of Risk of Web Application Attacks on Healthcare Organizations appeared first on HIPAA Journal. DDoS attacks are also conducted by hacktivists.

Electronic Medical Records 126

Electronic Medical Records Ransomware COVID-19 HIPAA 126

Health Populi

JANUARY 28, 2020

Smartphone adoption among older people grew by 50% since 2014, rising from 48% adoption among people 50+ to 79%. Under the current privacy regime of HIPAA for healthcare, indeed, we are. legislators can get on the same privacy page.

HIPAA 169

HIPAA Health Insurance Doctors 169

HIPAA Journal

AUGUST 24, 2023

APT18 is believed to be behind a 2014 attack on a healthcare provider in which the data of 4.5 The post Know Your Adversary: HC3 Shares Details of Chinese APT Groups Targeting the Healthcare Sector appeared first on HIPAA Journal. million patients was stolen.

COVID-19 Vaccine 74

COVID-19 Vaccine Governance COVID-19 Public Health 74

HIPAA Journal

JULY 13, 2023

The inspection was performed as the Northern Arizona VA Healthcare System had not previously been visited as part of a Federal Information Security Modernization Act of 2014 (FISMA) audit. The post Multiple Security Vulnerabilities Identified at Arizona VA Healthcare System appeared first on HIPAA Journal.

Department of Veterans Affairs 75

Department of Veterans Affairs HIPAA 75

HIPAA Journal

NOVEMBER 1, 2022

The news of a critical flaw existing brought back memories of the Heartbleed Bug (CVE-2014-0160) which was exploited to read the memory of systems including servers and routers to eavesdrop on communications. The post OpenSSL Downgrades Bug Severity to High and Releases Patches appeared first on HIPAA Journal.

HIPAA 106

HIPAA 106

HIPAA Journal

AUGUST 10, 2023

This is the first major update to the NIST CSF since its release in 2014. for Public Comment appeared first on HIPAA Journal. The National Institute of Standards and Technology (NIST) has published a draft version of an updated version of its popular Cybersecurity Framework (CSF) – version 2.0.

Governance 52

Governance HIPAA Hospitals 52

HIPAA Journal

SEPTEMBER 28, 2022

APT41 – also known as Double Dragon, Barium, Winnti, Wicked Panda, Wicked Spider, TG-2633, Bronze Atlas, Red Kelpie – conducted targeted campaigns on the healthcare sector in 2014, 2015, 2016, 2018, 2019, and 2020. The post Healthcare Industry Warned About Risk Posed by APT41 Threat Group appeared first on HIPAA Journal.

Pharmaceutical Industry 73

Pharmaceutical Industry HIPAA Governance 73

Health Populi

APRIL 17, 2023

The bill expands privacy protections for Washington State’s health citizens beyond HIPAA’s provisions. The Washington State legislature passed House Bill 1155, aka the My Health, My Data Act , last week. Governor Jay Inslee is expected to sign this into State law later this year.

HIPAA 62

HIPAA Hospitals 62

HIPAA Journal

JANUARY 26, 2023

One of the most commonly used downloaders is Emotet, which first emerged in 2014 as a banking Trojan. The post Healthcare Industry Most Commonly Attacked with Downloaders and Ransomware appeared first on HIPAA Journal. The operators of these botnets partner with other threat groups to deliver third-party payloads.

Ransomware 115

Ransomware HIPAA 115

Healthcare IT Today

DECEMBER 5, 2019

While we’ve been writing about EMR data archiving since back in 2009 and then again in 2013 and 2014 to name a few, the topic has never been more important than it is today. With many healthcare organizations literally supporting 100s and even 1000s of health IT software, how you handle legacy systems including data […].

HIPAA 59

HIPAA Hospitals 59

HIT Consultant

MARCH 7, 2022

Founded in 2014, Health Gorilla is focused on streamlining access to clinical data with a suite of FHIR-based APIs that digital health developers integrate into their products. These paired with varying data standards have created a healthcare environment that is disconnected and difficult for patients to navigate.

Compliance Officers 52

Compliance Officers HIPAA Compliance 52

Compliancy Group

JANUARY 20, 2022

In 2014 Kiteworks was launched as a successor to FTA. This case also underscores some commonly overlooked points by many working to achieve HIPAA compliance. . Compliancy Group has a security assessment questionnaire for business associates built into our industry-standard HIPAA Compliance software solution, “The Guard.”

Licensing 52

Licensing Compliance HIPAA Governance 52