HIPAA Journal

SEPTEMBER 13, 2023

The indictments of multiple members of the TrickBot/Conti Ransomware groups have recently been unsealed and 11 members of these cybercriminal operations have been sanctioned by the United States and the United Kingdom. government and other U.S. Galochkin was also one of 11 individuals recently sanctioned by the U.S.

Ransomware 82

Ransomware Governance HIPAA Hospitals 82

HIPAA Journal

APRIL 22, 2022

A new report from Comcast Business indicates 2021 was another record-breaking year for Distributed Denial of Service (DDoS) attacks. million DDoS attacks were reported in 2021, which is a 14% increase from 2019, although slightly lower than the previous year when 10.1 Multi-vector attacks increased by 47% in 2021.

COVID-19 133

COVID-19 Ransomware HIPAA Governance 133

HIPAA Journal

APRIL 28, 2022

Irvine, CA-based Smile Brands, a provider of support services for dental offices, has recently provided an update on the number of individuals affected by a ransomware attack that was discovered on April 24, 2021. The initial notice to the Maine attorney general was submitted on October 8, 2021.

Ransomware 106

Ransomware Health Insurance HIPAA Licensing 106

HIT Consultant

MARCH 20, 2022

If ransomware is not a topic of conversation around any healthcare organization’s boardroom table, directors and senior executives may be exposing the organization (and themselves) to considerable risk. Here’s a guide to ransomware trends for 2022 and steps healthcare leaders can take to help protect their organizations.

Ransomware 98

Ransomware HIPAA Governance Hospitals 98

HIPAA Journal

FEBRUARY 8, 2024

A new report from Chainalysis has revealed victims of ransomware attacks paid hackers $1.1 These are also conservative figures, as the researchers are unaware of all of the cryptocurrency wallets used by ransomware gangs. The researchers believe this anomaly is linked to the Russia-Ukraine war.

Ransomware 83

Ransomware HIPAA Governance Hospitals 83

Healthcare It News

MAY 2, 2024

UnitedHealth Group CEO Andrew Witty testified on May 1 before both the House and Senate about the seismic February 21 cyberattack of UHG subsidiary Change Healthcare, which was infiltrated by the ALPHV ransomware gang. The particular ransomware attack made prime and backups inoperable.

US Department of Health and Human Services 275

US Department of Health and Human Services HIPAA Ransomware Governance 275

HIPAA Journal

OCTOBER 20, 2022

Check Point’s 2022 Mid-Year Report has revealed the healthcare industry has seen the biggest percentage rise in cyberattacks out of all industry sectors, increasing by 69% in 1H 2022, compared to 2021. Healthcare now ranks fifth highest in the number of weekly attacks, behind education, government/military, ISP/MSP, and communications.

Ransomware 117

Ransomware Governance HIPAA 117

HIPAA Journal

JANUARY 10, 2023

Globally, the healthcare industry had the highest percentage increase in weekly cyberattacks of any industry sector, with an increase of 74% from 2021 to an average of 1,463 attacks per week. In the United States, healthcare ranked second with 1,410 attacks per week, which is an 86% increase from 2021.

Ransomware 106

Ransomware HIPAA Hospitals Governance 106

HIPAA Journal

NOVEMBER 29, 2022

HIPAA Journal is conducting interviews with healthcare professionals and service providers to find out more about their compliance journeys, how the HIPAA Rules have affected their working lives, and the successes and challenges they have faced with HIPAA compliance. Director, HIPAA Security & Regulatory Compliance, PPFA.

Regulatory Compliance 55

Regulatory Compliance HIPAA Compliance Federal Policy 55

HIPAA Journal

FEBRUARY 14, 2023

In 2021, an average of 2.46 Ransomware continues to be extensively used in cyberattacks on third parties and was involved in 27% of third-party breaches in 2022; however, there was a slight year-over-year decrease in ransomware attacks. per breach in 2022. of breaches were due to unsecured servers, 6.3% involved malware.

Ransomware 117

Ransomware HIPAA Governance 117

HIPAA Journal

NOVEMBER 17, 2022

Education was the most extensively targeted sector in Q3, experiencing an 18% rise in attacks, followed by government/military which saw a 20% increase. Healthcare was the third most targeted sector with an average of 1,426 attacks per month, but saw the second highest percentage increase in attacks, increasing by 60% from 2021.

Ransomware 70

Ransomware Governance Health Insurance HIPAA 70

HIPAA Journal

JUNE 9, 2023

The Clop ransomware gang and associated FIN11 threat group were suspected of involvement in the mass exploitation of the vulnerabilities as they had previously targeted vulnerabilities in file transfer solutions, exploiting zero-day vulnerabilities in the Accellion FTA and Fortra’s GoAnywhere MFT. On June 7, 2023, the U.S.

Ransomware 85

Ransomware HIPAA Public Health Governance 85

HIPAA Journal

DECEMBER 1, 2022

Stanley Street Treatment and Resources Discloses October 2021 Data Breach. STAR), has recently announced a data breach that occurred more than a year ago in October 2021. Health Plan Member Data Potentially Compromised in Innovative Service Technology Management Services Ransomware Attack.

Health Insurance 98

Health Insurance Ransomware HIPAA Governance 98

Total HIPAA

DECEMBER 8, 2020

Here at Total HIPAA, we pride ourselves on providing helpful resources for all businesses striving for HIPAA compliance. As we approach the end of 2020, we reflect on the most popular HIPAA topics this year. CCPA & HIPAA: Important Intersections. Ransomware Attacks Directed at Businesses Grow.

HIPAA 40

HIPAA COVID-19 Ransomware Compliance 40

HIPAA Journal

JUNE 16, 2022

The data breach that sparked the lawsuit was announced by the healthcare provider in May 2021 and was reported to the HHS’ Office for Civil Rights (OCR) as affecting 125,500 patients, although the total was later revised to 154,513 patients. Netgain Technologies reportedly paid a $2.3

Ransomware 85

Ransomware Health Insurance HIPAA Governance 85

Compliancy Group

MARCH 30, 2023

According to the report, there were 847,376 complaints of suspected internet crime in 2021, representing a 7% increase compared to the previous year. In 2022 there were a total of 800,944 complaints, which shows a 5% decrease from 2021, but the potential total loss has increased from $6.9 billion to more than $10.2 Find Out More!

Ransomware 52

Ransomware Fraud HIPAA Compliance 52

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems. The breach was detected on October 22, 2021.

Fraud 94

Fraud Health Insurance Ransomware HIPAA 94

HIT Consultant

DECEMBER 21, 2022

The key challenges faced by the industry include Data Breaches, Ransomware, Extensive use of Mobile Applications without proper ways to perform Authentication and Authorization and Lack of Healthcare Data Interoperability. million in 2021. Recent Data Breaches: – November 2022: Ransomware Hacker Steals Medibank Data on 9.7m

Ransomware 52

Ransomware HIPAA Health Insurance Governance 52

HIPAA Journal

JUNE 8, 2022

Emotet has been used to deliver a range of malware variants including IcedID, Trickbot, Qbot, Azorult, and ransomware payloads such as Ryuk and BitPaymer. Canada, and Europe successfully took down the Emotet infrastructure in January 2021 and removed the disabled malware from infected devices in April 2021.

Ransomware 105

Ransomware HIPAA Governance 105

HIPAA Journal

MAY 24, 2023

Northwest Health – La Porte Impacted by Fortra GoAnywhere Hack Northwest Health – La Porte in Indiana has recently confirmed that the protected health information of 10,256 patients was compromised in the Clop ransomware group’s series of attacks between January 28, 2023, and January 30, 2023.

HIPAA 109

HIPAA Ransomware Licensing Governance 109

AIHC

NOVEMBER 6, 2023

The focus of this article is to “connect the dots” between Health Insurance Portability & Accountability Act (HIPAA) and HITECH regarding privacy and security of electronically protected health information (ePHI). HITECH puts a “bite” into specific elements of the HIPAA rule, such as higher penalty amounts for non-compliance.

HIPAA 59

HIPAA Compliance Governance Health Insurance 59

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems. The breach was detected on October 22, 2021.

Fraud 69

Fraud Health Insurance Ransomware HIPAA 69

HIPAA Journal

OCTOBER 4, 2022

October is Cybersecurity Awareness Month – a 19-year collaborative effort between the government and industry to improve awareness of cybersecurity in the United States, led by the Cybersecurity and Infrastructure Security Agency (CISA) and the National Cybersecurity Alliance (NCA). and certificate-based authentication.

HIPAA 102

HIPAA Compliance Ransomware Governance 102

AIHC

NOVEMBER 6, 2023

The focus of this article is to “connect the dots” between Health Insurance Portability & Accountability Act (HIPAA) and HITECH regarding privacy and security of electronically protected health information (ePHI). HITECH puts a “bite” into specific elements of the HIPAA rule, such as higher penalty amounts for non-compliance.

HIPAA 52

HIPAA Compliance Governance Health Insurance 52

HIPAA Journal

MARCH 7, 2022

There have been calls for healthcare organizations to take steps to improve security due to a major rise in hacking incidents, ransomware attacks, and vulnerability disclosures in 2021. The post Poor Employee Cyber Hygiene is Putting Healthcare Cybersecurity at Risk appeared first on HIPAA Journal.

HIPAA 142

HIPAA Ransomware Compliance Governance 142

HIPAA Journal

AUGUST 11, 2023

The CSRB consists of 15 cybersecurity leaders from the federal government and private sector and is chaired by Robert Silvers, Under Secretary for Policy at the U.S. The post Even Well-Defended Companies are Vulnerable to Lapsus$ Attacks appeared first on HIPAA Journal. Department of Homeland Security.

Governance 52

Governance HIPAA Ransomware 52

Compliancy Group

JANUARY 25, 2022

With at least six weeks before final numbers are in, the Department of Health and Human Services HIPAA Breach Reporting Tool website is reporting 713 major healthcare data breaches in 2021, an increase of more than 7.5 By the Numbers: Major Healthcare Data Breaches Increase in 2021. million records in 2021.

HIPAA 98

HIPAA Ransomware Governance Fraud 98

HIPAA Journal

AUGUST 18, 2023

These apps and devices can collect highly sensitive health data, yet the information collected is generally not protected by the HIPAA Rules. ITRC noticed this growing trend starting in late 2021 and the data breach notifications required under HIPAA increasingly see consumers provided with little or no actionable information.

HIPAA 75

HIPAA Ransomware Public Health Governance 75

HIPAA Journal

JULY 3, 2023

The compromised information varied from patient to patient and may have included first and last names, addresses, dates of birth, Social Security numbers, driver’s license numbers, government-issued identification numbers, health insurance information, medical conditions/diagnoses, and other health or medical information.

Health Insurance 84

Health Insurance Licensing Ransomware HIPAA 84

HIPAA Journal

JANUARY 11, 2023

These basic password errors are all too common in the healthcare industry and make it far too easy for malicious actors to gain initial access to networks for ransomware attacks and other nefarious purposes. Department of the Interior appeared first on HIPAA Journal. The post Password Management Howlers Identified at U.S.

Ransomware 92

Ransomware Governance HIPAA 92

Compliancy Group

NOVEMBER 14, 2022

The attacks on critical infrastructure in America, such as the Colonial Pipeline ransomware attack in May 2021, prompted the passage of CIRCIA. HIPAA and Cybersecurity. Protect your business with HIPAA now! Become HIPAA Compliant × Get HIPAA Compliant! CIRCIA and HIPAA Cybersecurity Response Plans.

Ransomware 52

Ransomware HIPAA Compliance Public Health 52

HIT Consultant

MAY 9, 2023

Eye Care Leaders was accused of concealing multiple ransomware attacks in 2021, which resulted in a provider-led lawsuit. Both cases are windows into the high-stakes cyber risk landscape for healthcare providers and payers, particularly when it comes to an organization’s being fined by the federal government for HIPAA violations.

Ransomware 95

Ransomware Fraud Health Insurance HIPAA 95

HIPAA Journal

OCTOBER 20, 2022

government is taking steps to improve critical infrastructure cybersecurity, with healthcare, water, and the communications sectors the next focus areas for the White House. Cyberattacks on critical infrastructure have been increasing, especially ransomware attacks, many of which have hit the healthcare sector.

Ransomware 123

Ransomware Governance HIPAA Hospitals 123

Total HIPAA

JUNE 7, 2021

Phishing, ransomware, and supply chain attacks have surged in 2021. Some of the major cybersecurity attacks of the past year include: The infamous SolarWinds hack, in which a massive data breach occurred after SolarWinds, a third-party vendor widely used across the federal government, fell victim to a sophisticated hacking campaign. ³

US Department of Health and Human Services 52

US Department of Health and Human Services Ransomware HIPAA Compliance 52

HIPAA Journal

SEPTEMBER 1, 2022

CorrectHealth Notifies 54,000 Patients About November 2021 Email System Breach. The breach was detected on November 10, 2021, with the investigation confirming several employee email accounts had been accessed by an unauthorized individual. Ransomware Attack Impacts Brasseler Patients. Dental, LLC and Brasseler U.S.A.

Ransomware 77

Ransomware Licensing Health Insurance HIPAA 77

HIPAA Journal

OCTOBER 31, 2022

In response to the May 2021 ransomware attacks on the oil pipeline system operator, Colonial Pipeline, and the food processing firm JBS, President Biden signed an Executive Order on Improving the Nation’s Cybersecurity. The Biden Administration has stressed that the CPGs are voluntary and there are no reporting requirements.

Ransomware 55

Ransomware HIPAA Governance Compliance 55

HIT Consultant

DECEMBER 26, 2021

Government mandates were an impetus for change, starting with the Health Information Technology for Economic and Clinical Health (HITECH) Act, enacted as part of the American Recovery and Reinvestment Act (ARRA) of 2009 to “promote the adoption and meaningful use of health information technology” (Office of Civil Rights (OCR), 2017).

Due Diligence 98

Due Diligence Compliance HIPAA Nurses 98