HIPAA Journal

APRIL 8, 2024

Planned Parenthood Los Angeles, a provider of reproductive healthcare services in Los Angeles County, has proposed a $6 million settlement to resolve all claims related to a 2021 data breach that exposed the personal information of more than 409,437 patients.

Ransomware 74

Ransomware HIPAA Health Insurance Fraud 74

HIPAA Journal

JANUARY 31, 2023

Affected individuals were notified about the cyberattack in August 2021 and were offered complimentary credit monitoring and identity theft protection services. Claims of up to $2,500 will be accepted for documented extraordinary losses due to identity theft and fraud. A lawsuit – Lopez, et al.

Ransomware 59

Ransomware Fraud Health Insurance HIPAA 59

HIPAA Journal

DECEMBER 23, 2022

It has been another bad year for healthcare data breaches, with some of the biggest HIPAA breaches of 2022 resulting in the impermissible disclosure of well over a million records. The Biggest HIPAA Breaches of 2022. The 12 biggest HIPAA breaches of 2022 affected almost 22.66 million patients and health plan members.

HIPAA 79

HIPAA Ransomware Health Insurance Compliance 79

HIPAA Journal

NOVEMBER 16, 2022

Unauthorized individuals have gained access to the email system of the Administrative Fund of the Detectives’ Endowment Association of the Police Department of the City of New York (NYCDEA) and potentially viewed or obtained the protected health information of 21,544 individuals.

HIPAA 83

HIPAA Licensing Health Insurance Fraud 83

Health Care Law Brief

JUNE 24, 2022

The Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”), recently issued new regulatory guidance relating to covered entities’ HIPAA-compliant use of remote communication technologies for audio-only telehealth services. The new HIPAA guidance affects covered entities in four key ways.

HIPAA 52

HIPAA Fraud Compliance COVID-19 52

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems.

Fraud 94

Fraud Health Insurance Ransomware HIPAA 94

HIPAA Journal

MARCH 25, 2022

The forensic investigation revealed the email accounts were accessed by unauthorized individuals between April 7, 2021, and June 2, 2021. AHA provided notice about the attack on January 6, 2021. UMC was a victim of a REvil ransomware attack in June 2021 that resulted in the theft of the protected health information of 1.3

Health Insurance 104

Health Insurance Licensing Ransomware Fraud 104

HIPAA Journal

APRIL 15, 2022

The incident involved the exposure and potential theft of the protected health information of 318,400 patients, including names, addresses, birth dates patient account numbers, medical record numbers, health insurance information, testing, diagnostic, treatment, and claims information.

Electronic Medical Records 111

Electronic Medical Records HIPAA Health Insurance Fraud 111

HIPAA Journal

OCTOBER 6, 2022

Mon Health is facing a class action lawsuit over a hacking incident that allowed unauthorized individuals to gain access to its network for an 11-day period in December 2021. The lawsuit, which names Monongalia Health Systems Inc. and affiliated hospitals, Monongalia County General Hospital Co.,

HIPAA 89

HIPAA Fraud Hospitals Health Insurance 89

HIPAA Journal

JUNE 13, 2023

Point32Health is the second largest insurer in Massachusetts and serves more than 2.4 Point32Health was formed following the merger of Harvard Pilgrim Health Care and Tufts Health Plan in 2021. Harvard Pilgrim Health Care Inc. Harvard Pilgrim Health Care, Inc. million customers. and Point32Health, Inc.

Ransomware 94

Ransomware Fraud Health Insurance HIPAA 94

HIPAA Journal

FEBRUARY 16, 2023

The Nashville, TN-based health system, Advent Health Partners, has proposed a $500,000 settlement to resolve claims related to a September 2021 data breach involving the protected health information of 61,072 patients. Advent Health Partners detected a breach of its email environment in early September 2021.

HIPAA 90

HIPAA Fraud Licensing Health Insurance 90

Innovaare Compliance

MARCH 24, 2024

The Importance of Payment Integrity Payment integrity is crucial for health plans to control costs, reduce fraud, waste, and abuse (FWA), and ensure the accuracy of healthcare payments. billion in healthcare fraud judgments and settlements. billion in healthcare fraud judgments and settlements.

Fraud 52

Fraud Health Insurance Compliance Medicaid 52

HIPAA Journal

FEBRUARY 14, 2023

Hackers gained access to Umass Memorial Health’s email environment between June 24, 2020 and January 7, 2021, as a result of responses to phishing emails. Claims may also be submitted for extraordinary losses up to a maximum of $5,000, which can include documented, unreimbursed losses to fraud and identity theft.

Fraud 88

Fraud Licensing Health Insurance HIPAA 88

HIPAA Journal

DECEMBER 27, 2022

On or around August 1, 2021, Morley Companies, a Saignaw, MI-based provider of business services, suffered a cyberattack in which hackers gained access to parts of its network. The post Class Action Data Breach Lawsuit Settled by Morley Companies appeared first on HIPAA Journal. A fund of $4.3

Fraud 105

Fraud HIPAA Health Insurance 105

HIPAA Journal

AUGUST 5, 2022

The cyberattack was discovered by VPN Solutions on or around October 31, 2021, and the forensic investigation confirmed that the information potentially compromised in the attack included names, addresses, dates of birth, diagnostic and treatment information, health insurance information, and Social Security numbers.

Electronic Medical Records 88

Electronic Medical Records Health Insurance Fraud HIPAA 88

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems.

Fraud 69

Fraud Health Insurance Ransomware HIPAA 69

HIPAA Journal

FEBRUARY 15, 2023

The medical device manufacturer Electromed has proposed a $850,000 settlement to resolve claims related to a June 2021 ransomware attack and data breach involving the protected health information of 47,200 individuals. The post Electromed Proposes $825,000 Class Action Data Breach Settlement appeared first on HIPAA Journal.

Ransomware 81

Ransomware Fraud Licensing Health Insurance 81

HIPAA Journal

SEPTEMBER 29, 2022

Choice Health worked with its service provider to ensure the database was secured and additional data security measures have been implemented to prevent similar occurrences in the future. The post Humana Members Impacted by Choice Health Data Breach appeared first on HIPAA Journal.

Health Insurance 105

Health Insurance Medicare Medicare Fraud 105

HIPAA Journal

JANUARY 16, 2023

A settlement proposed by Rehoboth McKinley Christian Health Care Services to resolve claims related to February 2021 cyberattack has been approved by a New Mexico federal judge. Patients were notified about the data breach in May 2021. In June 2021, a lawsuit – Charlie et al. District Court Judge Steven C.

Fraud 95

Fraud Health Insurance HIPAA Hospitals 95

HIPAA Journal

JANUARY 25, 2023

Logan Health has agreed to settle a class action lawsuit related to a 2021 hacking incident that exposed the protected health information of 213,543 individuals. Under the terms of the settlement, Logan Health has agreed to create a fund of $4.3 The post Logan Health Proposes $4.3

Medical Billing 82

Medical Billing Fraud HIPAA Health Insurance 82

HIPAA Journal

AUGUST 4, 2022

A third-party cybersecurity firm was engaged to assist with the investigation and confirmed that a limited number of employee email accounts had been accessed by an unauthorized third party between October 5, 2021, and May 15, 2022, as a result of responses to phishing emails. OrthoArizona Notifies Patients About October 2021 Cyberattack.

Health Insurance 75

Health Insurance Fraud HIPAA 75

HIPAA Journal

DECEMBER 19, 2022

A review of the files on the compromised servers confirmed that protected health information such as patient names, dates of birth, Social Security numbers, driver’s license numbers, health insurance information, and diagnosis and treatment information had been exposed. The DOL and the U.S.

Fraud 91

Fraud Licensing HIPAA Health Insurance 91

HIPAA Journal

APRIL 1, 2022

On January 24, 2022, SRHD announced that an employee email account had been compromised on December 21, 2021. Buffalo, NY-based Ciox Health provides health information management services to healthcare providers and insurers. CMMHC identified potentially malicious activity in its email environment on October 21, 2021.

Fraud 128

Fraud HIPAA Licensing Health Insurance 128

HIPAA Journal

NOVEMBER 21, 2022

million being defrauded from Medicaid, Medicare, and private health insurance programs. According to the FBI, more than $43 billion was lost to these scams between June 2016 and December 2021, and in 2021 alone, the FBI Internet Crime Complaint Center received reports of losses of $2,395,953,296 to BEC scams.

Medicaid 75

Medicaid Medicaid Medicare Medicare 75

HIPAA Journal

MARCH 21, 2023

MRHS discovered unauthorized access to its computer systems on November 8, 2022, and determined hackers had exfiltrated files from its systems more than a year earlier on October 30, 2021. The lawsuits allege the victims of these breaches now face a substantial risk of fraud, identity theft, and other misuses of their personal data.

Hospitals 68

Hospitals Fraud Health Insurance HIPAA 68

HIPAA Journal

FEBRUARY 13, 2023

iCare Acquisitions has proposed a $3 million settlement to resolve claims from individuals affected by a 2021 data breach that affected almost 3.3 million 20/20 Eye Care Network and 20/20 Hearing Care Network health plan members. was filed in the U.S The final approval hearing has been scheduled for June 22, 2023.

HIPAA 68

HIPAA Fraud Health Insurance 68

HIPAA Journal

JANUARY 24, 2023

million records in 2021 to 51.9 The theft of protected health information places patients and health plan members at risk of identity theft and fraud, but by far the biggest concern is the threat to patient safety. Scripps Health suffered a data breach of 1.2 million records in 2021 due to a ransomware attack.

Ransomware 113

Ransomware HIPAA Hospitals Fraud 113

HIPAA Journal

DECEMBER 7, 2022

Urology of Greater Atlanta Notifies Almost 80,000 Patients About August 2021 Data Breach. Urology of Greater Atlanta has now confirmed that it was the victim of a cyberattack that was detected on August 29, 2021. The VA concluded that there was a low risk of misuse of that information.

COVID-19 Vaccine 81

COVID-19 Vaccine COVID-19 Department of Veterans Affairs Licensing 81

HIPAA Journal

MAY 25, 2022

SAC Health said it is unaware of any actual or attempted misuse of patient data as a result of the break-in; however, as a precaution against identity theft and fraud, affected individuals have been offered complimentary credit monitoring services. Notification letters were sent to those individuals on May 3, 2022.

Ransomware 124

Ransomware Fraud HIPAA Licensing 124

HIPAA Journal

OCTOBER 14, 2022

Data compiled by HIPAA Journal from breach reports submitted to the HHS’ Office for Civil Rights (OCR) show the number of data breaches reported by HIPAA-regulated entities continues to increase every year. 2021 saw 714 data breaches of 500 or more records reported to the OCR – an 11% increase from the previous year.

Ransomware 108

Ransomware HIPAA Health Insurance Hospitals 108

HIPAA Journal

SEPTEMBER 28, 2022

The attack exposed the protected health information of 542,776 current and former Wolfe Clinic patients. Wolfe Clinic used the myCare Integrity medical records platform, which was accessed by an unauthorized party on or around December 4, 2021, who deleted databases and system configuration files.

Electronic Medical Records 73

Electronic Medical Records Ransomware Fraud HIPAA 73

HIPAA Journal

NOVEMBER 21, 2022

The Wisconsin-based dermatology practice, Forefront Dermatology, has agreed to settle a class action lawsuit filed on behalf of patients whose protected health information (PHI) was compromised in a ransomware attack in late May 2021. Million Settlement to Resolve Ransomware Lawsuit appeared first on HIPAA Journal.

Ransomware 62

Ransomware Fraud HIPAA Licensing 62

HIPAA Journal

MAY 18, 2023

The information exposed included names, addresses, dates of birth, Social Security numbers, health insurance information, diagnoses/conditions, medications, test results, and procedure information. Asian Health Services did not find any evidence to indicate patient data had been compromised but the possibility could not be ruled out.

Ransomware 70

Ransomware Fraud HIPAA Health Insurance 70

Healthcare IT Today

DECEMBER 15, 2023

In Europe, this is GDPR (General Data Protection Regulation), in America, it’s HIPAA (Health Insurance Portability and Accountability Act). AWS solutions require software compatible with HIPAA standards. Currently, ChatGPT does not meet HIPAA standards.

Electronic Medical Records 106

Electronic Medical Records Doctors HIPAA Hospitals 106

HIT Consultant

DECEMBER 18, 2023

In Europe, this is GDPR (General Data Protection Regulation), in America, it’s HIPAA (Health Insurance Portability and Accountability Act). AWS solutions require software compatible with HIPAA standards. Google Cloud Platform The storage operates by HIPAA standards. Pros: Scalable for different needs.

Electronic Medical Records 105

Electronic Medical Records Doctors HIPAA Pharmaceutical Industry 105

Compliancy Group

JANUARY 25, 2022

With at least six weeks before final numbers are in, the Department of Health and Human Services HIPAA Breach Reporting Tool website is reporting 713 major healthcare data breaches in 2021, an increase of more than 7.5 By the Numbers: Major Healthcare Data Breaches Increase in 2021. million records in 2021.

HIPAA 98

HIPAA Ransomware Governance Fraud 98

Healthcare Law Blog

MAY 31, 2022

The FTC’s increasing interest in health information that sits outside of HHS/OCR’s reach is likely to only expand in light of health-related metaverse use cases. The healthcare system in the United States is governed by an expansive network of state and federal laws, including the aforementioned HIPAA regulations. 1, 2021). [2]

FDA 90

FDA HIPAA Medicare Medicare 90