HIPAA Journal

NOVEMBER 16, 2022

According to the breach report filed with the Maine Attorney General, it took until October 3, 2022, to confirm that an unauthorized third party had accessed the email system, which included sensitive information of its members. Notification letters were sent to affected individuals on October 31, 2022.

HIPAA 83

HIPAA Licensing Health Insurance Fraud 83

HIPAA Journal

AUGUST 29, 2023

The HHS’ Office for Civil Rights released guidance in 2022 on HIPAA and website tracking technologies and confirmed disclosures of protected health information to third parties via website tracking technologies is a HIPAA violation unless authorization has been received from patients or if there is a valid business associate agreement in place.

HIPAA 73

HIPAA Fraud Health Insurance Compliance 73

HIPAA Journal

JUNE 8, 2023

Alvaria explained that the ransomware attack occurred on November 28, 2022, and steps were immediately taken to contain the attack and prevent further unauthorized access to its network. The post Alvaria Confirms November 2022 Hive Ransomware Attack appeared first on HIPAA Journal.

Ransomware 52

Ransomware Fraud HIPAA Health Insurance 52

HIPAA Journal

OCTOBER 21, 2022

There are – and always have been – gaps in HIPAA and, after more than a quarter of a century, some have yet to be addressed. Most of the gaps in HIPAA are attributable to omissions from the original Act, provisions of HIPAA and HITECH that have never been enacted, and the increasing use of technology in healthcare.

HIPAA 95

HIPAA Compliance Medicare Medicare 95

HIPAA Journal

SEPTEMBER 7, 2022

The Morristown, VT-based healthcare provider, Lamoille Health Partners, is facing a class action lawsuit over a June 2022 ransomware attack that affected almost 60,000 of its patients. The attack was detected on June 13, 2022, with the investigation confirming the attackers gained access to its network the previous day.

HIPAA 103

HIPAA Ransomware Fraud Health Insurance 103

HIPAA Journal

MARCH 30, 2023

A lawsuit has been filed against the digital marketing agency, Rise Interactive Media & Analytics, over a cyberattack in which the protected health information of approximately 54,500 patients of Edgepark Medical Supplies was compromised.

Health Insurance 91

Health Insurance Fraud HIPAA 91

HIPAA Journal

OCTOBER 17, 2022

Valle de Sol did not state in its notification letters when hackers gained access to its network, or for how long they had access, but did confirm that the unauthorized activity was detected on January 25, 2022. A comprehensive review was conducted of all files that may have been accessed, which was completed on July 18, 2022.

Health Insurance 113

Health Insurance Licensing Fraud HIPAA 113

Health Care Law Brief

JUNE 24, 2022

The Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”), recently issued new regulatory guidance relating to covered entities’ HIPAA-compliant use of remote communication technologies for audio-only telehealth services. The new HIPAA guidance affects covered entities in four key ways.

HIPAA 52

HIPAA Fraud Compliance COVID-19 52

HIPAA Journal

AUGUST 5, 2022

In a substitute breach notification, First Choice explained that unusual activity was detected within its technological environment on March 27, 2022. Affected individuals were notified about the breach by mail on August 1, 2022, and have been offered complimentary identity theft protection services through IDX.

Electronic Medical Records 88

Electronic Medical Records Health Insurance Fraud HIPAA 88

HIPAA Journal

SEPTEMBER 30, 2022

The plaintiffs alleged the security failures were in violation of the Health Insurance Portability and Accountability Act, although the lawsuit was filed over the violation of state laws. The plaintiffs also took issue with how Magellan Health handled the data breach and the delay in issuing notifications.

Fraud 91

Fraud HIPAA Health Insurance 91

HIPAA Journal

APRIL 15, 2022

A lawsuit has been filed against the in-home respiratory care provider, SuperCare Health, over a cyberattack and data breach that was reported to the Department of Health and Human Services on March 28, 2022. The post SuperCare Health Sued Over 318,000-Record Data Breach appeared first on HIPAA Journal.

Electronic Medical Records 111

Electronic Medical Records HIPAA Health Insurance Fraud 111

HIPAA Journal

SEPTEMBER 29, 2022

Humana has recently announced that the protected health information of 22,767 individuals has potentially been compromised in a security incident and data breach at one of its business associates – Choice Health – which Human used to sell Medicare products on its behalf.

Health Insurance 105

Health Insurance Medicare Medicare Fraud 105

HIPAA Journal

MARCH 21, 2023

ILS Identified the breach in July 2022 and determined unauthorized individuals had access to its network between June 30, 2022, and July 5, 2022. The post Independent Living Systems Sued Over 4 Million-Record Data Breach appeared first on HIPAA Journal. The lawsuit was filed by Joseph G.

Fraud 98

Fraud Health Insurance Medicaid Medicaid 98

HIPAA Journal

MARCH 7, 2023

The cyberattack in question occurred on December 1, 2022. Hackers gained access to the medical groups’ IT systems, preventing access to certain servers on December 2, 2022. The attempted fraudulent activity occurred between December 2022 and February 2023, before being informed by the defendants about the data breach.

Fraud 106

Fraud Health Insurance HIPAA Doctors 106

HIPAA Journal

NOVEMBER 23, 2022

The attack occurred between January 26 and January 28, 2022, and while the attack was detected by the firm’s endpoint security solution shortly after the ransomware was executed, it was not possible to prevent the encryption of certain files on its network.

Ransomware 103

Ransomware Fraud Licensing HIPAA 103

HIPAA Journal

DECEMBER 19, 2022

Avem Health Partners, an Oklahoma City-based provider of administrative and technology services to healthcare organizations, has recently started notifying its healthcare clients about a data breach that occurred at one of its vendors, 365 Data Centers. Department of Labor (DOL) on August 24, 2022. The DOL and the U.S.

Fraud 91

Fraud Licensing HIPAA Health Insurance 91

HIPAA Journal

SEPTEMBER 9, 2022

That process concluded on June 24, 2022. Those emails contained patient information such as names, dates of birth, Social Security numbers, medical information, health insurance information, driver’s license numbers, and state ID numbers. appeared first on HIPAA Journal.

Licensing 96

Licensing Health Insurance Fraud HIPAA 96

HIPAA Journal

MARCH 21, 2023

The lawsuits are currently pending in the District Courts in Arkansas and were filed in response to two data breaches that were discovered in 2022. MRHS discovered unauthorized access to its computer systems on November 8, 2022, and determined hackers had exfiltrated files from its systems more than a year earlier on October 30, 2021.

Hospitals 68

Hospitals Fraud Health Insurance HIPAA 68

HIPAA Journal

MAY 1, 2023

One Brooklyn Health, a New York City-based network of three acute care hospitals – Brookdale Hospital Medical Center, Interfaith Medical Center, and Kingsbrook Jewish Medical Center – is facing a class action lawsuit over a data breach that was discovered in November 2022. More than 235,000 patients were affected.

Health Insurance 55

Health Insurance Fraud HIPAA Hospitals 55

HIPAA Journal

AUGUST 2, 2023

Notification letters will be sent to the affected individuals in the coming weeks and credit monitoring, fraud consultation, and identity theft restoration services will be offered. A third-party data review company was provided with the files on December 22, 2022, and provided the results of the analysis to SHS on May 16, 2023.

Licensing 71

Licensing Electronic Medical Records Ransomware Health Insurance 71

HIPAA Journal

FEBRUARY 16, 2023

The investigation confirmed hackers had access to, and potentially stole, the protected health information of patients such as names, Social Security numbers, driver’s license information, dates of birth, health insurance, medical treatment information, and financial account information. Advent Health Partners, Inc.

HIPAA 90

HIPAA Fraud Licensing Health Insurance 90

HIPAA Journal

FEBRUARY 14, 2023

Another lawsuit has been filed against Connexin Software over its August 2022 ransomware attack and data breach, which affected more than 2.2 On August 26, 2022, Connexin discovered hackers had gained access to its systems and used ransomware to encrypt files. Million-Record Data Breach appeared first on HIPAA Journal.

Electronic Medical Records 79

Electronic Medical Records Ransomware HIPAA Fraud 79

HIPAA Journal

NOVEMBER 15, 2022

Anesthesiology firms started reporting data breaches to the Department of Health and Human Services’ Office for Civil Rights in September 2022, with the notification letters to patients indicating there had been a data breach at their anesthesia management services organization. The notification letters failed to name that company.

HIPAA 81

HIPAA Fraud Licensing Health Insurance 81

HIPAA Journal

OCTOBER 6, 2022

Mon Health said it detected the breach on December 30, 2021, with the forensic investigation determining hackers accessed its network between December 9 and December 19. The lawsuit, which names Monongalia Health Systems Inc. The post Mon Health Faces Class Action Lawsuit Over 493K Record Data Breach appeared first on HIPAA Journal.

HIPAA 89

HIPAA Fraud Hospitals Health Insurance 89

HIPAA Journal

JULY 20, 2022

While data theft could not be determined, the affected email accounts contained the protected health information of patients of 19 of its hospitals, including names, birth dates, health insurance information, Social Security numbers, driver’s license, and healthcare data. BJC HealthCare has committed $2.7

Fraud 108

Fraud Licensing HIPAA Health Insurance 108

HIPAA Journal

AUGUST 4, 2022

Unusual activity was detected within its email environment on June 1, 2022. Notification letters were therefore sent to all individuals whose protected health information was present in the affected email accounts. Notification letters were sent to affected individuals on July 22, 2022.

Health Insurance 75

Health Insurance Fraud HIPAA 75

HIPAA Journal

MARCH 22, 2023

The plaintiff and class members now face an increased risk of identity theft and fraud as their private information is now in the hand of cybercriminals. The post Class Action Lawsuit Filed Against Cardiovascular Associates Over 441K-Record Data Breach appeared first on HIPAA Journal.

HIPAA 91

HIPAA Fraud Licensing Health Insurance 91

HIPAA Journal

MAY 25, 2022

Social Action Community Health System (SAC Health) has recently notified 149,940 patients that documents containing their protected health information were stolen in a break-in at an off-site storage location where patient records were stored. Notification letters were sent to those individuals on May 3, 2022.

Ransomware 124

Ransomware Fraud HIPAA Licensing 124

HIPAA Journal

APRIL 18, 2023

The lawsuit was filed in response to a breach of a Microsoft 365-hosted business email account that was detected on April 14, 2022. The lawsuit alleges the plaintiff and class members face imminent and impending injury from the increased risk of identity theft and fraud.

HIPAA 77

HIPAA Fraud Licensing Health Insurance 77

HIPAA Journal

MARCH 25, 2022

Ultimate Care said no reports have been received that indicate there has been any misuse of patient information; however, as a precaution against identity theft and fraud, individuals whose Social Security numbers were impacted have been offered complimentary one-year memberships with a credit monitoring service.

Health Insurance 104

Health Insurance Licensing Ransomware Fraud 104

HIPAA Journal

MARCH 24, 2022

Notification letters started to be sent to affected individuals on March 15, 2022. Notification letters started to be sent to affected individuals on March 15, 2022. Chelan Douglas Health District said it is unaware of any cases of identity fraud or other misuse of patient data.

Ransomware 122

Ransomware Fraud Hospitals HIPAA 122

HIPAA Journal

AUGUST 4, 2022

The forensic investigation confirmed that names, addresses, diagnoses, treatment information, patient account numbers, billing information, dentists’ names, payment card information, and health insurance information had potentially been compromised. The deadline for opting out of the settlement – July 26, 2022 – has now passed.

Fraud 109

Fraud HIPAA Health Insurance 109

HIPAA Journal

APRIL 25, 2023

On February 13, 2023, NationsBenefits confirmed that the data compromised in the attack included protected health information such as name, address, phone number, gender, date of birth, health insurance number, medical ID number, Social Security number, date(s) of service, medical device or product purchased, and provider/caregiver name.

Health Insurance 81

Health Insurance Public Health Ransomware Fraud 81

HIPAA Journal

DECEMBER 27, 2022

Morley Companies has agreed to settle a class action lawsuit filed on behalf of individuals affected by a major data breach that occurred on or around August 1, 2022. The post Class Action Data Breach Lawsuit Settled by Morley Companies appeared first on HIPAA Journal. A fund of $4.3

Fraud 105

Fraud HIPAA Health Insurance 105

HIPAA Journal

JANUARY 25, 2023

Logan Health, formerly Kalispell Regional Medical Center, is a 622-bed health system based in Kalispell, MT, which operates six hospitals and more than 68 provider clinics in the state. Logan Health chose to settle the lawsuit to avoid further legal costs and the uncertainty of trial. The post Logan Health Proposes $4.3

Medical Billing 82

Medical Billing Fraud HIPAA Health Insurance 82

HIPAA Journal

SEPTEMBER 28, 2022

Wolfe Clinic said names, addresses, birth dates, Social Security numbers, diagnostic information, and health insurance information were potentially compromised. At the time of issuing notifications, Wolfe Clinic had not received any reports of identity theft and fraud related to the Eye Care Leaders data breach.

Electronic Medical Records 73

Electronic Medical Records Ransomware Fraud HIPAA 73

HIPAA Journal

NOVEMBER 17, 2022

Salud Family Health Provides Update on September 2022 Ransomware Attack. Colorado-based Salud Family Health, a Federal Qualified Health Center (FQHC), has recently provided an update on a September 2022 cyberattack and has confirmed that patient data was potentially stolen.

Ransomware 79

Ransomware Health Insurance Hospitals Fraud 79