HIPAA Journal

MAY 25, 2022

SAC Health said it is unaware of any actual or attempted misuse of patient data as a result of the break-in; however, as a precaution against identity theft and fraud, affected individuals have been offered complimentary credit monitoring services. Bryan County Ambulance Authority Ransomware Attack Affects 14,000 Patients.

Ransomware 130

Ransomware Fraud HIPAA Licensing 130

HIPAA Journal

MARCH 28, 2023

A New York law firm that suffered a LockBit ransomware attack has agreed to pay a financial penalty of $200,000 to the New York Attorney General to resolve alleged violations of New York General Business Law and the Privacy and Security Rules of the Health Insurance Portability and Accountability Act (HIPAA).

HIPAA 108

HIPAA Ransomware Malpractice Health Insurance 108

HIPAA Journal

JANUARY 6, 2023

The Chicago, IL-based health system, CommonSpirit Health, is facing a class action lawsuit over its October 2022 ransomware attack. Malicious actors gained access to its IT systems on September 16, 2022, and deployed ransomware on October 2, 2022.

Ransomware 89

Ransomware Fraud Electronic Medical Records Hospitals 89

HIPAA Journal

APRIL 8, 2024

Planned Parenthood Los Angeles, a provider of reproductive healthcare services in Los Angeles County, has proposed a $6 million settlement to resolve all claims related to a 2021 data breach that exposed the personal information of more than 409,437 patients.

Ransomware 81

Ransomware HIPAA Health Insurance Fraud 81

HIPAA Journal

MARCH 24, 2022

Chelan Douglas Health District in East Wenatchee, WA, has announced it was the victim of a cyberattack in July 2021 in which the personal and protected health information of patients was exfiltrated from its systems. A representative for the health district said this was not a ransomware attack.

Ransomware 128

Ransomware Fraud Hospitals HIPAA 128

HIPAA Journal

DECEMBER 23, 2022

It has been another bad year for healthcare data breaches, with some of the biggest HIPAA breaches of 2022 resulting in the impermissible disclosure of well over a million records. The Biggest HIPAA Breaches of 2022. The 12 biggest HIPAA breaches of 2022 affected almost 22.66 OneTouch Point – Ransomware Attack Involving 4.11

HIPAA 86

HIPAA Ransomware Health Insurance Compliance 86

HIPAA Journal

NOVEMBER 21, 2022

The Wisconsin-based dermatology practice, Forefront Dermatology, has agreed to settle a class action lawsuit filed on behalf of patients whose protected health information (PHI) was compromised in a ransomware attack in late May 2021. Million Settlement to Resolve Ransomware Lawsuit appeared first on HIPAA Journal.

Ransomware 67

Ransomware Fraud HIPAA Licensing 67

HIPAA Journal

MARCH 3, 2023

AssistCare Home Health Services has agreed to settle a class action lawsuit, filed on behalf of individuals affected by a cyberattack and data breach in January 2021. Unauthorized individuals gained access to its network between January 8 and January 10, 2021, and exfiltrated files containing patient data.

Ransomware 86

Ransomware Fraud HIPAA 86

Compliancy Group

FEBRUARY 17, 2022

Background of CPA HIPAA Breach. According to a notice updated on the firm’s website on January 17, 2022, there was unusual activity detected on the company network on September 14, 2021. Under HIPAA regulations, this CPA HIPAA breach likely contained PHI. × HIPAA for CPAs. We can help! Learn More! ×

HIPAA 52

HIPAA Compliance Ransomware Fraud 52

HIPAA Journal

JANUARY 24, 2023

million records in 2021 to 51.9 The theft of protected health information places patients and health plan members at risk of identity theft and fraud, but by far the biggest concern is the threat to patient safety. million records in 2021 due to a ransomware attack. million records in 2022.

HIPAA 118

HIPAA Ransomware Hospitals Fraud 118

HIPAA Journal

FEBRUARY 15, 2023

The medical device manufacturer Electromed has proposed a $850,000 settlement to resolve claims related to a June 2021 ransomware attack and data breach involving the protected health information of 47,200 individuals. The post Electromed Proposes $825,000 Class Action Data Breach Settlement appeared first on HIPAA Journal.

Ransomware 90

Ransomware Fraud Licensing Health Insurance 90

HIPAA Journal

JULY 6, 2023

UKG (Ultimate Kronos Group), a multinational provider of workforce management and human resources (HR) management services, has proposed a $6 million settlement to resolve claims related to a ransomware attack and data breach that was discovered in 2021. Members of two subclasses are entitled to additional payments.

Ransomware 78

Ransomware COVID-19 Fraud HIPAA 78

Compliancy Group

MARCH 30, 2023

According to the report, there were 847,376 complaints of suspected internet crime in 2021, representing a 7% increase compared to the previous year. In 2022 there were a total of 800,944 complaints, which shows a 5% decrease from 2021, but the potential total loss has increased from $6.9 billion to more than $10.2 Find Out More!

Ransomware 52

Ransomware Fraud HIPAA Compliance 52

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems. The breach was detected on October 22, 2021.

Fraud 104

Fraud Health Insurance Ransomware HIPAA 104

HIPAA Journal

MARCH 25, 2022

The forensic investigation revealed the email accounts were accessed by unauthorized individuals between April 7, 2021, and June 2, 2021. AHA provided notice about the attack on January 6, 2021. UMC was a victim of a REvil ransomware attack in June 2021 that resulted in the theft of the protected health information of 1.3

Health Insurance 113

Health Insurance Licensing Ransomware Fraud 113

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems. The breach was detected on October 22, 2021.

Fraud 73

Fraud Health Insurance Ransomware HIPAA 73

HIPAA Journal

OCTOBER 14, 2022

Data compiled by HIPAA Journal from breach reports submitted to the HHS’ Office for Civil Rights (OCR) show the number of data breaches reported by HIPAA-regulated entities continues to increase every year. 2021 saw 714 data breaches of 500 or more records reported to the OCR – an 11% increase from the previous year.

Ransomware 117

Ransomware HIPAA Health Insurance Hospitals 117

HIPAA Journal

FEBRUARY 1, 2023

When a data breach occurs and sensitive information is disclosed, the HIPAA Breach Notification Rule requires affected individuals to be notified. While it was common for ransomware attacks to be reported as such, these are increasingly reported as hacking incidents with no mention of file encryption or data theft.

Fraud 119

Fraud HIPAA Ransomware Compliance 119

HIPAA Journal

MAY 18, 2023

Larger healthcare providers may temporarily divert ambulances and cancel some appointments following a ransomware attack but do not typically halt operations, but smaller healthcare providers may be left with little alternative. The Department of Health said the spreadsheet did not contain names, birthdates, addresses, or contact information.

Ransomware 76

Ransomware Fraud HIPAA Health Insurance 76

HIPAA Journal

MARCH 24, 2022

The brief identified the top five threats against EHR as phishing attacks, malware and ransomware, encryption blind spots, cloud threats, and the misuse of credentials by employees. It also reported that the most common cause of healthcare data breaches in 2021 was compromised credentials.

HIPAA 119

HIPAA Ransomware Fraud 119

HIPAA Journal

SEPTEMBER 28, 2022

Wolfe Clinic used the myCare Integrity medical records platform, which was accessed by an unauthorized party on or around December 4, 2021, who deleted databases and system configuration files. The Hive ransomware gang claimed responsibility for the attack. million patients.

Electronic Medical Records 78

Electronic Medical Records Ransomware Fraud HIPAA 78

HIPAA Journal

FEBRUARY 9, 2023

In 2022, 22% of the data breaches investigated by Kroll occurred at healthcare organizations, up from 16% in 2021 – a year-over-year increase of 38%. These lawsuits allege victims face an imminent and increased risk of identity theft and fraud as a result of the theft of their personal and protected health information.

Fraud 52

Fraud Ransomware HIPAA Licensing 52

Compliancy Group

JANUARY 25, 2022

With at least six weeks before final numbers are in, the Department of Health and Human Services HIPAA Breach Reporting Tool website is reporting 713 major healthcare data breaches in 2021, an increase of more than 7.5 By the Numbers: Major Healthcare Data Breaches Increase in 2021. million records in 2021.

HIPAA 98

HIPAA Ransomware Governance Fraud 98

Compliancy Group

MAY 27, 2022

Here’s a roundup of recent HIPAA breach lawsuits and settlements. Lawsuits Increasing Following HIPAA Breaches – Facts and Figures. The law firm BakerHostetler published its annual Data Security Incident Response Report based on findings from 1,270 data security incidents managed by the firm in 2021. . Learn More! ×

HIPAA 98

HIPAA Ransomware Compliance Hospitals 98

HIPAA Journal

JANUARY 27, 2023

Des Plaines, IL-based Lutheran Social Services of Illinois, one of the largest providers of social services in the state, has announced that its systems were compromised and ransomware was used to encrypt files. This coincides with the 60-day reporting deadline of the HIPAA Breach Notification Rule.

Ransomware 94

Ransomware HIPAA Fraud Hospitals 94

HIPAA Journal

MAY 18, 2023

The Department of Health and Human Services’ Office for Civil Rights is the main enforcer of HIPAA compliance; however, state Attorneys General also play a role in enforcing compliance with the Rules of the Health Insurance Portability and Accountability Act (HIPAA). million individuals and for delayed breach notifications.

HIPAA 99

HIPAA Compliance Ransomware Hospitals 99

HIT Consultant

MAY 9, 2023

As a result, patients feared an increased risk of fraud. While it was not publicized how the attacker gained initial access to the company’s network, plaintiffs argued that it was the DCA’s poor cybersecurity practices that exposed them to the risk of identity theft and fraud. million Ransomware : 3.85 percent, cost: $73.6

Ransomware 95

Ransomware Fraud Health Insurance HIPAA 95

HIPAA Journal

MARCH 1, 2023

The Albuquerque, NM-based health insurance provider, True Health New Mexico, has proposed a settlement to resolve claims related to a 2021 data breach that affected 62,983 members of its health plans. The post True Health New Mexico Proposes Settlement to Resolve Class Action Data Breach Lawsuit appeared first on HIPAA Journal.

Fraud 103

Fraud Ransomware Health Insurance HIPAA 103

HIPAA Journal

MARCH 8, 2023

Ransomware gangs in particular have seen profits take a nosedive, with ransom payments decreasing by 38% year-over-year as victims refuse to pay up, even when there is the threat of publication of stolen data. The number of critical vulnerabilities reported in 2022 doubled from 2021, due to the rapidly evolving attack surface.

Ransomware 84

Ransomware Fraud HIPAA 84

Hall Render

NOVEMBER 4, 2022

HHS releases video on documenting recognized HIPAA security practices. California physician charged with $53M mail fraud and money laundering scheme. The highest-paid health system CEO in Greater Philadelphia made $10M in 2021. OakBend Medical Center faces lawsuit for ransomware attack that breached 1M patient records.

US Department of Health and Human Services 40

US Department of Health and Human Services COVID-19 Nurses Nursing Homes 40

MedTrainer

JULY 21, 2022

However, unauthorized access is causing more than just identity fraud. In January of 2018, Hancock Health of Indiana experienced a serious ransomware attack that forced their entire network to shut down. The HHS needs to work together with victims to report data breaches—but who would want to admit to a HIPAA violation?

US Department of Health and Human Services 52

US Department of Health and Human Services HIPAA COVID-19 Compliance 52

Hall Render

OCTOBER 27, 2023

Ransomware attacks against hospitals put patients’ lives at risk, researchers say States, FTC continue to target noncompetes: 3 updates The best hospital in each state, per Newsweek What to know about Stark law’s $9.2M Million Health Care Fraud Conspiracy in Idaho Orthopedic activity in the 5 most underserved states St.

US Department of Health and Human Services 40

US Department of Health and Human Services Nurses Nursing Homes Hospitals 40

Hall Render

APRIL 14, 2023

But hospitals say they can’t afford to pay California hospital nurses to receive raises of up to 30% California pharmacist pleads guilty to multi-year Medicare fraud scheme Carmichael-based Eskaton pays $5.5

Nursing Homes 40

Nursing Homes US Department of Health and Human Services Nurses COVID-19 40

Hall Render

FEBRUARY 24, 2023

NATIONAL Addressing Staff Burnout In Healthcare Design Amazon completes $3.9B Can Hospitals Change in Time to Keep Them? doctor talks importance of diversity in health care Illinois hospital CEO dismissed amid board investigation Illinois paid sick leave legislation heading to Gov. million from non-profit to help end childhood cancer St.

Nursing Homes 40

Nursing Homes COVID-19 Nurses Hospitals 40

Hall Render

MARCH 17, 2023

‘Not what we were looking for,’ CEO says Fired CEO files slander, defamation suit against Scotland County Hospital Missouri health system appoints strategy chief Missouri physician pleads guilty to $537K Medicare fraud scheme New Behavioral Health Crisis Center Open in Cape Girardeau St. Who are they?

US Department of Health and Human Services 40

US Department of Health and Human Services Nursing Homes COVID-19 Nurses 40

Hall Render

APRIL 21, 2023

health-tech startup MemoryWell pivots, eyes new funding to roll out software for insurers Department of Veterans Affairs health system kicks off multiyear Greater Washington expansion Georgetown to open Southeast D.C.

US Department of Health and Human Services 40

US Department of Health and Human Services COVID-19 Nurses Nursing Homes 40