HIPAA Journal

MARCH 25, 2022

The forensic investigation revealed the email accounts were accessed by unauthorized individuals between April 7, 2021, and June 2, 2021. AHA provided notice about the attack on January 6, 2021. UMC was a victim of a REvil ransomware attack in June 2021 that resulted in the theft of the protected health information of 1.3

Health Insurance 107

Health Insurance Licensing Ransomware Fraud 107

The Health Law Firm Blog

NOVEMBER 24, 2021

is Board Certified by The Florida Bar in Health Law On September 27, 2021, Humana agreed to pay $11.2 million to end claims that the health insurance company denied a group of nurses overtime pay by misclassifying them as exempt employees. By George F. Indest III, J.D., A Wisconsin federal judge approved the.

Health Insurance 40

Health Insurance Nurses Licensing Doctors 40

HIPAA Journal

MAY 11, 2023

million settlement to resolve a class action lawsuit filed in response to a 2021 hacking incident in which the protected health information of 318,379 patients was compromised. The Californian home care service provider, SuperCare, has proposed a $2.25

HIPAA 85

HIPAA Health Insurance Licensing Hospitals 85

HIPAA Journal

FEBRUARY 16, 2022

Philadelphia FIGHT Community Health Centers has recently announced it was the victim of a cyberattack on November 30, 2021. The information potentially compromised in the attack included names, dates of birth, Social Security numbers, medical diagnoses, treatment information, and health insurance information.

Electronic Medical Records 100

Electronic Medical Records Health Insurance Licensing HIPAA 100

HIPAA Journal

MARCH 14, 2022

Capital Region Medical Center (CRMC) in Jefferson City, MO has recently confirmed patient information was accessed by unauthorized individuals in a December 2021 cyberattack that took its network and phone systems offline for several days. The attack was detected on December 17, 2021, when network systems were disrupted.

Electronic Medical Records 129

Electronic Medical Records Health Insurance HIPAA Licensing 129

SQA

JUNE 10, 2021

SQA Regulatory Surveillance Summary #4, 2021. Brazilian Regulators Update Economic Monitoring Requirements for Some Medical Devices, 26 March 2021. The new regulation takes effect on 01 April 2021. ANVISA: The Advances of 2020 in Regulatory Quality Improvement, 31 March 2021.

FDA 52

FDA COVID-19 COVID-19 Vaccine Compliance 52

The Health Law Firm Blog

MARCH 26, 2024

is Board Certified by The Florida Bar in Health Law On September 27, 2021, Humana agreed to pay $11.2 million to end claims that the health insurance company denied a group of nurses overtime pay by misclassifying them as exempt employees. By George F. Indest III, J.D., A Wisconsin federal judge approved the [.]

Nurses 52

Nurses Health Insurance Licensing Doctors 52

HIPAA Journal

MARCH 4, 2022

Miami Lakes, FL-based Catholic Health Services has discovered the email accounts of three Catholic Hospice employees have been accessed by unauthorized individuals. Crossroads Health in Ohio has experienced a cyberattack that disrupted some of its IT systems. Bible Fellowship Church Homes, Inc.

Health Insurance 121

Health Insurance Licensing HIPAA 121

HIPAA Journal

SEPTEMBER 12, 2023

Seymour, IN-based Schneck Medical Center has settled a lawsuit with the Indiana attorney general, Todd Rokita, over a 2021 ransomware attack and data breach that affected 89,707 Indiana residents.

HIPAA 87

HIPAA Ransomware Health Insurance Fraud 87

HIPAA Journal

MARCH 9, 2022

The Birmingham, AL-based multi-specialty clinic, Norwood Clinic, has recently started notifying 228,103 individuals that some of their protected health information was accessed in a cyberattack that was detected on October 22, 2021. The review was concluded on February 2, 2022, and affected customers were updated on February 14, 2022.

Electronic Medical Records 116

Electronic Medical Records Health Insurance Ransomware HIPAA 116

HIPAA Journal

APRIL 7, 2022

SuperCare Health, a Downey, CA-based post-acute, in-home respiratory care provider serving the Western United States, has recently started notifying 318,379 patients that some of their protected health information has been exposed and potentially accessed by unauthorized individuals in a cyberattack that occurred in July 2021.

Licensing 127

Licensing HIPAA Health Insurance Hospitals 127

HIPAA Journal

JULY 5, 2022

Individuals who had their Social Security numbers or driver’s license numbers exposed have been offered complimentary credit monitoring and identity theft protection services. The breach occurred in early December 2021 and was detected when the account was used to send spam emails.

Licensing 99

Licensing Electronic Medical Records Health Insurance Hospitals 99

HIPAA Journal

NOVEMBER 16, 2022

Unauthorized individuals have gained access to the email system of the Administrative Fund of the Detectives’ Endowment Association of the Police Department of the City of New York (NYCDEA) and potentially viewed or obtained the protected health information of 21,544 individuals.

HIPAA 86

HIPAA Licensing Health Insurance Fraud 86

HIPAA Journal

APRIL 28, 2022

Irvine, CA-based Smile Brands, a provider of support services for dental offices, has recently provided an update on the number of individuals affected by a ransomware attack that was discovered on April 24, 2021. The initial notice to the Maine attorney general was submitted on October 8, 2021.

Ransomware 109

Ransomware Health Insurance HIPAA Licensing 109

HIPAA Journal

JULY 11, 2022

According to the hospital operator, Tower Health, the unauthorized access was discovered during a routine audit of medical record access logs. Some of the accessed records included partial Social Security numbers and health insurance information. Family Practice Center Reports October 2021 Hacking Incident.

Hospitals 97

Hospitals HIPAA Health Insurance Licensing 97

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems.

Fraud 97

Fraud Health Insurance Ransomware HIPAA 97

HIPAA Journal

FEBRUARY 14, 2023

Hackers gained access to Umass Memorial Health’s email environment between June 24, 2020 and January 7, 2021, as a result of responses to phishing emails. The breach affected almost 3,000 Massachusetts residents and was reported to the HHS’ Office for Civil Rights as affecting 209,048 individuals.

Fraud 91

Fraud Licensing Health Insurance HIPAA 91

HIPAA Journal

MAY 17, 2022

The review of the files revealed they mostly contained protected health information such as names, addresses, medical information, and/or health insurance information. Notification letters have now been sent to the 28,024 patients whose protected health information has potentially been compromised.

Health Insurance 94

Health Insurance Licensing Ransomware HIPAA 94

HIPAA Journal

APRIL 18, 2022

NRH explained on its website that a limited number of employee email accounts were accessed by unauthorized individuals over a period of 10 months in 2021 between January 26, 2021, and November 23, 2021. The types of information exposed included names, Social Security numbers, driver’s license numbers, state-issued I.D.

Licensing 110

Licensing HIPAA Health Insurance Hospitals 110

HIPAA Journal

APRIL 15, 2022

The incident involved the exposure and potential theft of the protected health information of 318,400 patients, including names, addresses, birth dates patient account numbers, medical record numbers, health insurance information, testing, diagnostic, treatment, and claims information.

Electronic Medical Records 115

Electronic Medical Records HIPAA Health Insurance Fraud 115

HIPAA Journal

MAY 2, 2022

Notification letters were mailed on February 22, 2022, and complimentary credit monitoring and identity protection services have been offered to individuals whose Social Security number or driver’s license number was exposed. Los Angeles County Department of Mental Health, California. Valley View Hospital, Colorado.

HIPAA 89

HIPAA Health Insurance Licensing Hospitals 89

HIPAA Journal

FEBRUARY 16, 2023

The Nashville, TN-based health system, Advent Health Partners, has proposed a $500,000 settlement to resolve claims related to a September 2021 data breach involving the protected health information of 61,072 patients. Advent Health Partners detected a breach of its email environment in early September 2021.

HIPAA 92

HIPAA Fraud Licensing Health Insurance 92

HIPAA Journal

FEBRUARY 15, 2023

The medical device manufacturer Electromed has proposed a $850,000 settlement to resolve claims related to a June 2021 ransomware attack and data breach involving the protected health information of 47,200 individuals.

Ransomware 84

Ransomware Fraud Licensing Health Insurance 84

HIPAA Journal

MAY 31, 2022

A limited number of patients also had their health insurance information, driver’s license numbers, and/or Social Security numbers exposed. Camden, NJ-based Cooper University Health Care announced on May 25, 2022, that the email account of an employee was accessed by an unauthorized individual on November 24, 2021.

Licensing 67

Licensing HIPAA Health Insurance 67

HIPAA Journal

OCTOBER 17, 2022

RAA said suspicious activity was detected within its environment in August 2021. The forensic investigation confirmed that unauthorized individuals had access to certain systems between July 22, 2021, and August 3, 2021, and copied files from its network that contained patient data.

Licensing 56

Licensing HIPAA Health Insurance Medicaid 56

HIPAA Journal

MARCH 6, 2023

Cedar Park, TX-based Dental Health Management Solutions (DHMS), a provider of dental services to the government/military and private patients has recently announced – via its legal counsel – that the protected health information of certain patients was exposed in a 2021 hacking incident.

Electronic Medical Records 75

Electronic Medical Records HIPAA Licensing Nurses 75

HIPAA Journal

MARCH 21, 2022

As previously reported on this site, JDC Healthcare Management detected malware within its IT network on or around August 9, 2021, with the forensic investigation into the security breach confirming the malware was downloaded onto its systems on July 27, 2021. Further information on the data breach has now been obtained.

Ransomware 99

Ransomware Licensing HIPAA Health Insurance 99

HIPAA Journal

MARCH 9, 2022

Assisted by a third-party cybersecurity company, Montrose Regional Health discovered multiple employee email accounts had been accessed by unauthorized individuals between August 2, 2021, and October 26, 2021. Montrose Regional Health said it found no evidence of misuse of any of the information stored in the email accounts.

Health Insurance 67

Health Insurance Licensing Hospitals HIPAA 67

HIPAA Journal

NOVEMBER 9, 2023

Radiology Specialists into a large data breach that was reported in 2021 to determine whether it was caused by a failure to comply with the Health Insurance Portability and Accountability Act (HIPAA) and state laws. On January 22, 2021, SonicWall alerted its customers about a coordinated cyberattack on its internal systems.

HIPAA 56

HIPAA Health Insurance Licensing Compliance 56

HIPAA Journal

MAY 19, 2022

A comprehensive review of the affected files confirmed they contained information such as names, birth dates, addresses, Social Security numbers, driver’s license numbers, passport numbers, financial account information such as bank account and routing numbers, and online account usernames and passwords.

COVID-19 102

COVID-19 Health Insurance Licensing HIPAA 102

HIPAA Journal

DECEMBER 7, 2022

Urology of Greater Atlanta Notifies Almost 80,000 Patients About August 2021 Data Breach. Urology of Greater Atlanta has now confirmed that it was the victim of a cyberattack that was detected on August 29, 2021. In some cases, Social Security numbers, driver’s license numbers, or financial account information, were also exposed.

COVID-19 Vaccine 83

COVID-19 Vaccine COVID-19 Department of Veterans Affairs Licensing 83

Healthcare Compliance Blog

MARCH 17, 2022

In the first incident, in October 2021, an Alabama clinic’s cyberattack affected over 228,000 individuals. The cyberattack resulted in unauthorized data access of patient names, contact information, driver’s license numbers, Social Security numbers, birth dates, health insurance policy numbers, and limited health information.

Licensing 59

Licensing Health Insurance COVID-19 HIPAA 59

Compliancy Group

APRIL 11, 2022

In one of the largest breaches reported in 2022 so far, SuperCare Health suffered a hacking incident affecting 318,379 patients. The network intrusion was initially detected on July 27, 2021. However, it took SuperCare Health until February 2022 to discover the incident had potentially compromised that patient information.

US Department of Health and Human Services 98

US Department of Health and Human Services HIPAA Compliance Licensing 98

HIPAA Journal

APRIL 1, 2022

On January 24, 2022, SRHD announced that an employee email account had been compromised on December 21, 2021. Buffalo, NY-based Ciox Health provides health information management services to healthcare providers and insurers. CMMHC identified potentially malicious activity in its email environment on October 21, 2021.

Fraud 129

Fraud HIPAA Licensing Health Insurance 129

HIPAA Journal

MARCH 1, 2022

Priority Health Confirms Breach of Member Portal Accounts. The Michigan health insurer Priority Health has recently announced a breach of several member portal accounts. According to a recent breach notice, the security breach was detected on December 16, 2021.

COVID-19 89

COVID-19 Health Insurance HIPAA Licensing 89

HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems.

Fraud 69

Fraud Health Insurance Ransomware HIPAA 69

HIPAA Journal

MARCH 23, 2022

New Jersey Brain and Spine (NJBS) has recently announced it was the victim of a cyberattack on or around November 16, 2021, that encrypted data on its network. NJBS said it immediately took steps to secure its network and engaged a computer forensic firm to investigate the security breach.

HIPAA 120

HIPAA Licensing Health Insurance Governance 120