HIPAA Journal

MAY 11, 2023

million settlement to resolve a class action lawsuit filed in response to a 2021 hacking incident in which the protected health information of 318,379 patients was compromised. Million Settlement to Resolve Data Breach Lawsuit appeared first on HIPAA Journal. The post SuperCare Proposes $2.25

HIPAA 84

HIPAA Health Insurance Licensing Hospitals 84

HIPAA Journal

MARCH 25, 2022

The forensic investigation revealed the email accounts were accessed by unauthorized individuals between April 7, 2021, and June 2, 2021. AHA provided notice about the attack on January 6, 2021. UMC was a victim of a REvil ransomware attack in June 2021 that resulted in the theft of the protected health information of 1.3

Health Insurance 104

Health Insurance Licensing Ransomware Fraud 104

HIPAA Journal

MARCH 10, 2022

Bako Diagnostics (BakoDx), a Georgia-based provider of laboratory services to healthcare providers, has announced it was the victim of a cyberattack that was discovered on December 28, 2021. The files exfiltrated from its systems included the protected health information of patients.

Ransomware 123

Ransomware Licensing Health Insurance Hospitals 123

HIPAA Journal

JULY 11, 2022

Phoenixville Hospital Fires Employee for HIPAA Violation. According to the hospital operator, Tower Health, the unauthorized access was discovered during a routine audit of medical record access logs. Some of the accessed records included partial Social Security numbers and health insurance information.

Hospitals 94

Hospitals HIPAA Health Insurance Licensing 94

HIPAA Journal

FEBRUARY 16, 2022

Philadelphia FIGHT Community Health Centers has recently announced it was the victim of a cyberattack on November 30, 2021. The information potentially compromised in the attack included names, dates of birth, Social Security numbers, medical diagnoses, treatment information, and health insurance information.

Electronic Medical Records 97

Electronic Medical Records Health Insurance Licensing HIPAA 97

HIPAA Journal

MARCH 14, 2022

Capital Region Medical Center (CRMC) in Jefferson City, MO has recently confirmed patient information was accessed by unauthorized individuals in a December 2021 cyberattack that took its network and phone systems offline for several days. The attack was detected on December 17, 2021, when network systems were disrupted.

Electronic Medical Records 128

Electronic Medical Records Health Insurance HIPAA Licensing 128

HIPAA Journal

APRIL 7, 2022

SuperCare Health, a Downey, CA-based post-acute, in-home respiratory care provider serving the Western United States, has recently started notifying 318,379 patients that some of their protected health information has been exposed and potentially accessed by unauthorized individuals in a cyberattack that occurred in July 2021.

Licensing 125

Licensing HIPAA Health Insurance Hospitals 125

HIPAA Journal

MARCH 4, 2022

Miami Lakes, FL-based Catholic Health Services has discovered the email accounts of three Catholic Hospice employees have been accessed by unauthorized individuals. Crossroads Health in Ohio has experienced a cyberattack that disrupted some of its IT systems. Bible Fellowship Church Homes, Inc.

Health Insurance 118

Health Insurance Licensing HIPAA 118

HIPAA Journal

APRIL 15, 2022

The incident involved the exposure and potential theft of the protected health information of 318,400 patients, including names, addresses, birth dates patient account numbers, medical record numbers, health insurance information, testing, diagnostic, treatment, and claims information.

Electronic Medical Records 111

Electronic Medical Records HIPAA Health Insurance Fraud 111

HIPAA Journal

MARCH 6, 2023

Cedar Park, TX-based Dental Health Management Solutions (DHMS), a provider of dental services to the government/military and private patients has recently announced – via its legal counsel – that the protected health information of certain patients was exposed in a 2021 hacking incident.

Electronic Medical Records 74

Electronic Medical Records HIPAA Licensing Nurses 74

Compliancy Group

APRIL 11, 2022

In one of the largest breaches reported in 2022 so far, SuperCare Health suffered a hacking incident affecting 318,379 patients. The network intrusion was initially detected on July 27, 2021. However, it took SuperCare Health until February 2022 to discover the incident had potentially compromised that patient information.

US Department of Health and Human Services 98

US Department of Health and Human Services HIPAA Compliance Licensing 98

HIPAA Journal

FEBRUARY 16, 2023

The Nashville, TN-based health system, Advent Health Partners, has proposed a $500,000 settlement to resolve claims related to a September 2021 data breach involving the protected health information of 61,072 patients. Advent Health Partners detected a breach of its email environment in early September 2021.

HIPAA 90

HIPAA Fraud Licensing Health Insurance 90

HIPAA Journal

APRIL 28, 2022

Irvine, CA-based Smile Brands, a provider of support services for dental offices, has recently provided an update on the number of individuals affected by a ransomware attack that was discovered on April 24, 2021. The initial notice to the Maine attorney general was submitted on October 8, 2021.

Ransomware 106

Ransomware Health Insurance HIPAA Licensing 106

HIPAA Journal

MARCH 9, 2022

The Birmingham, AL-based multi-specialty clinic, Norwood Clinic, has recently started notifying 228,103 individuals that some of their protected health information was accessed in a cyberattack that was detected on October 22, 2021. The review was concluded on February 2, 2022, and affected customers were updated on February 14, 2022.

Electronic Medical Records 113

Electronic Medical Records Health Insurance Ransomware HIPAA 113

HIPAA Journal

NOVEMBER 9, 2023

Radiology Specialists into a large data breach that was reported in 2021 to determine whether it was caused by a failure to comply with the Health Insurance Portability and Accountability Act (HIPAA) and state laws. Radiology Specialists for $450,000 appeared first on HIPAA Journal.

HIPAA 55

HIPAA Health Insurance Licensing Compliance 55

HIPAA Journal

APRIL 18, 2022

NRH explained on its website that a limited number of employee email accounts were accessed by unauthorized individuals over a period of 10 months in 2021 between January 26, 2021, and November 23, 2021. The types of information exposed included names, Social Security numbers, driver’s license numbers, state-issued I.D.

Licensing 107

Licensing HIPAA Health Insurance Hospitals 107

HIPAA Journal

JULY 5, 2022

Individuals who had their Social Security numbers or driver’s license numbers exposed have been offered complimentary credit monitoring and identity theft protection services. The breach occurred in early December 2021 and was detected when the account was used to send spam emails. million individuals have potentially been compromised.

Licensing 96

Licensing Electronic Medical Records Health Insurance Hospitals 96

HIPAA Journal

FEBRUARY 14, 2023

Hackers gained access to Umass Memorial Health’s email environment between June 24, 2020 and January 7, 2021, as a result of responses to phishing emails. The post Umass Memorial Health Proposes $1.2 Million Settlement to Resolve Data Breach Lawsuit appeared first on HIPAA Journal.

Fraud 88

Fraud Licensing Health Insurance HIPAA 88

HIPAA Journal

MARCH 23, 2022

New Jersey Brain and Spine (NJBS) has recently announced it was the victim of a cyberattack on or around November 16, 2021, that encrypted data on its network. and Dialyze Direct appeared first on HIPAA Journal. Notification letters were sent to affected individuals on March 10, 2022. Highmark Inc.,

HIPAA 118

HIPAA Licensing Health Insurance Governance 118

Bill of Health

JUNE 5, 2023

medical licensing exam , diagnose illnesses , and even outshine human doctors on measures of perceived empathy , raising many questions about how AI will reshape health care as we know it. In the field of medicine, ChatGPT already has been reported to ace the U.S. But what happens when AI gets things wrong?

Malpractice 208

Malpractice FDA HIPAA Doctors 208

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems.

Fraud 94

Fraud Health Insurance Ransomware HIPAA 94

HIPAA Journal

MAY 17, 2022

The review of the files revealed they mostly contained protected health information such as names, addresses, medical information, and/or health insurance information. Notification letters have now been sent to the 28,024 patients whose protected health information has potentially been compromised.

Health Insurance 94

Health Insurance Licensing Ransomware HIPAA 94

HIPAA Journal

FEBRUARY 15, 2023

The medical device manufacturer Electromed has proposed a $850,000 settlement to resolve claims related to a June 2021 ransomware attack and data breach involving the protected health information of 47,200 individuals. The post Electromed Proposes $825,000 Class Action Data Breach Settlement appeared first on HIPAA Journal.

Ransomware 81

Ransomware Fraud Licensing Health Insurance 81

HIPAA Journal

MAY 31, 2022

A limited number of patients also had their health insurance information, driver’s license numbers, and/or Social Security numbers exposed. Camden, NJ-based Cooper University Health Care announced on May 25, 2022, that the email account of an employee was accessed by an unauthorized individual on November 24, 2021.

Licensing 65

Licensing HIPAA Health Insurance 65

HIPAA Journal

OCTOBER 17, 2022

RAA said suspicious activity was detected within its environment in August 2021. The forensic investigation confirmed that unauthorized individuals had access to certain systems between July 22, 2021, and August 3, 2021, and copied files from its network that contained patient data.

Licensing 55

Licensing HIPAA Health Insurance Medicaid 55

HIPAA Journal

DECEMBER 12, 2022

Receivables Performance Management (RPM) in Lynnwood, WA, a business associate of several HIPAA-covered entities, has recently started notifying individuals affected by a 2021 ransomware attack. The incident was detected on May 12, 2021, with the investigation confirming its systems were first breached on April 8, 2021.

HIPAA 107

HIPAA Hospitals Ransomware Licensing 107

SQA

JUNE 10, 2021

SQA Regulatory Surveillance Summary #4, 2021. Brazilian Regulators Update Economic Monitoring Requirements for Some Medical Devices, 26 March 2021. The new regulation takes effect on 01 April 2021. ANVISA: The Advances of 2020 in Regulatory Quality Improvement, 31 March 2021.

FDA 52

FDA COVID-19 COVID-19 Vaccine Compliance 52

HIPAA Journal

MARCH 21, 2022

As previously reported on this site, JDC Healthcare Management detected malware within its IT network on or around August 9, 2021, with the forensic investigation into the security breach confirming the malware was downloaded onto its systems on July 27, 2021. Further information on the data breach has now been obtained.

Ransomware 96

Ransomware Licensing HIPAA Health Insurance 96

HIPAA Journal

MARCH 10, 2023

The lawsuit also takes issue with the delay in notifications, which were sent almost 9 months after the breach was detected, when the HIPAA Breach Notification Rule requires notifications to be issued within 60 days of the discovery of a data breach. Izquierdo claims he has been told he must pay the interest accrued on those cards.

Ransomware 82

Ransomware HIPAA Licensing Health Insurance 82

HIPAA Journal

MAY 19, 2022

A comprehensive review of the affected files confirmed they contained information such as names, birth dates, addresses, Social Security numbers, driver’s license numbers, passport numbers, financial account information such as bank account and routing numbers, and online account usernames and passwords.

COVID-19 99

COVID-19 Health Insurance Licensing HIPAA 99

HIPAA Journal

DECEMBER 19, 2022

A review of the files on the compromised servers confirmed that protected health information such as patient names, dates of birth, Social Security numbers, driver’s license numbers, health insurance information, and diagnosis and treatment information had been exposed.

Fraud 91

Fraud Licensing HIPAA Health Insurance 91

HIPAA Journal

APRIL 1, 2022

On January 24, 2022, SRHD announced that an employee email account had been compromised on December 21, 2021. Buffalo, NY-based Ciox Health provides health information management services to healthcare providers and insurers. CMMHC identified potentially malicious activity in its email environment on October 21, 2021.

Fraud 128

Fraud HIPAA Licensing Health Insurance 128

HIPAA Journal

JUNE 2, 2022

Suspicious activity was detected in the email account on December 2, 2021, and immediate action was taken to secure the account. The third-party forensic investigation confirmed the account had been accessed by an unauthorized individual between October 30, 2021, and November 11, 2021.

Licensing 74

Licensing HIPAA Health Insurance 74

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems.

Fraud 69

Fraud Health Insurance Ransomware HIPAA 69

HIPAA Journal

MARCH 1, 2022

Priority Health Confirms Breach of Member Portal Accounts. The Michigan health insurer Priority Health has recently announced a breach of several member portal accounts. According to a recent breach notice, the security breach was detected on December 16, 2021.

COVID-19 86

COVID-19 Health Insurance HIPAA Licensing 86

HIPAA Journal

DECEMBER 7, 2022

Urology of Greater Atlanta Notifies Almost 80,000 Patients About August 2021 Data Breach. Urology of Greater Atlanta has now confirmed that it was the victim of a cyberattack that was detected on August 29, 2021. In some cases, Social Security numbers, driver’s license numbers, or financial account information, were also exposed.

COVID-19 Vaccine 81

COVID-19 Vaccine COVID-19 Department of Veterans Affairs Licensing 81

HIPAA Journal

MARCH 9, 2022

Assisted by a third-party cybersecurity company, Montrose Regional Health discovered multiple employee email accounts had been accessed by unauthorized individuals between August 2, 2021, and October 26, 2021. Montrose Regional Health said it found no evidence of misuse of any of the information stored in the email accounts.

Health Insurance 65

Health Insurance Licensing Hospitals HIPAA 65