Compliancy Group

AUGUST 31, 2022

Department of Justice’s (DOJ) Civil Cyber Fraud Initiative (CCFI). Details of DOJ Cyber Fraud Initiative Settlements. Let’s Simplify Compliance Do you need help with HIPAA? × Automated HIPAA Compliance. DOJ Cyber Fraud Initiative and the HIPAA Connection. Compliancy Group can help! Learn More! ×

Fraud 52

Fraud HIPAA Governance Electronic Medical Records 52

HIPAA Journal

JANUARY 3, 2023

Attacks in the education sector have remained fairly consistent over the past 4 years with between 84 and 89 attacks conducted each year, as has the number of attacks on state and local governments – 105 in 2022 with an average of 102 attacks a year.

Ransomware 115

Ransomware Hospitals HIPAA Governance 115

Compliancy Group

MARCH 30, 2023

The 2022 Internet Crime Report has revealed alarming statistics about the rampant rise in cybercrime, making it more critical than ever to be aware of the dangers and take necessary precautions. In 2022 there were a total of 800,944 complaints, which shows a 5% decrease from 2021, but the potential total loss has increased from $6.9

Ransomware 52

Ransomware Fraud HIPAA Compliance 52

HIPAA Journal

AUGUST 29, 2023

The HHS’ Office for Civil Rights released guidance in 2022 on HIPAA and website tracking technologies and confirmed disclosures of protected health information to third parties via website tracking technologies is a HIPAA violation unless authorization has been received from patients or if there is a valid business associate agreement in place.

HIPAA 76

HIPAA Fraud Health Insurance Compliance 76

HIPAA Journal

MARCH 28, 2023

A New York law firm that suffered a LockBit ransomware attack has agreed to pay a financial penalty of $200,000 to the New York Attorney General to resolve alleged violations of New York General Business Law and the Privacy and Security Rules of the Health Insurance Portability and Accountability Act (HIPAA).

HIPAA 107

HIPAA Ransomware Malpractice Health Insurance 107

HIPAA Journal

NOVEMBER 16, 2022

According to the breach report filed with the Maine Attorney General, it took until October 3, 2022, to confirm that an unauthorized third party had accessed the email system, which included sensitive information of its members. Notification letters were sent to affected individuals on October 31, 2022.

HIPAA 91

HIPAA Licensing Health Insurance Fraud 91

HIPAA Journal

OCTOBER 21, 2022

There are – and always have been – gaps in HIPAA and, after more than a quarter of a century, some have yet to be addressed. Most of the gaps in HIPAA are attributable to omissions from the original Act, provisions of HIPAA and HITECH that have never been enacted, and the increasing use of technology in healthcare.

HIPAA 102

HIPAA Compliance Medicare Medicare 102

HIPAA Journal

JUNE 8, 2023

Alvaria explained that the ransomware attack occurred on November 28, 2022, and steps were immediately taken to contain the attack and prevent further unauthorized access to its network. The post Alvaria Confirms November 2022 Hive Ransomware Attack appeared first on HIPAA Journal.

Ransomware 52

Ransomware Fraud HIPAA Health Insurance 52

Health Care Performance

AUGUST 16, 2022

The HIPAA Security Rule requires covered entities and business associates to complete a HIPAA Security Risk Analysis, and to periodically update it. When investigating a breach, the OCR also reviews the organization’s compliance with the HIPAA Security Rule. What’s your HIPAA breach risk tolerance? Keep up the good work.

HIPAA 52

HIPAA Ransomware Compliance Fraud 52

Compliancy Group

FEBRUARY 17, 2022

Fiondella, Milone & LaSaracina (FML), of Glastonbury, CT, reported the hacking incident to the Department of Health and Human Services’ Office for Civil Rights on January 14, 2022. Background of CPA HIPAA Breach. Under HIPAA regulations, this CPA HIPAA breach likely contained PHI. × HIPAA for CPAs.

HIPAA 52

HIPAA Compliance Ransomware Fraud 52

Health Care Law Brief

JUNE 24, 2022

The Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”), recently issued new regulatory guidance relating to covered entities’ HIPAA-compliant use of remote communication technologies for audio-only telehealth services. The new HIPAA guidance affects covered entities in four key ways.

HIPAA 52

HIPAA Fraud Compliance COVID-19 52

HIPAA Journal

SEPTEMBER 7, 2022

The Morristown, VT-based healthcare provider, Lamoille Health Partners, is facing a class action lawsuit over a June 2022 ransomware attack that affected almost 60,000 of its patients. The attack was detected on June 13, 2022, with the investigation confirming the attackers gained access to its network the previous day.

HIPAA 109

HIPAA Ransomware Fraud Health Insurance 109

HIPAA Journal

JULY 25, 2023

Vanderbilt University Medical Center (VUMC) in Nashville, TN, has confirmed that the medical records of transgender patients have been provided to Tennessee Attorney General, Jonathan Skrmetti, in connection with an investigation of medical billing fraud.

Fraud 73

Fraud HIPAA Medical Billing Doctors 73

HIPAA Journal

SEPTEMBER 30, 2022

Had notifications been issued sooner, the plaintiffs argued that they could have taken steps to protect against identity theft and fraud. Class members that have incurred costs related to credit monitoring and fraud resolution may also be able to claim back those costs. Million appeared first on HIPAA Journal.

Fraud 99

Fraud HIPAA Health Insurance 99

HIPAA Journal

DECEMBER 8, 2022

The New York ambulance service, Empress EMS, is facing multiple class action lawsuits over a ransomware attack that was detected on July 14, 2022. Those files were stolen on July 13, 2022. The breach investigation revealed the ransomware gang first gained access to the network on or around May 26, 2022.

Ransomware 104

Ransomware HIPAA Fraud 104

HIPAA Journal

NOVEMBER 7, 2022

On September 1, 2022, OakBend Medical Center discovered its systems had been compromised and files had been encrypted. On October 28, 2022, two patients affected by the data breach – Ryan Higgs and Alissa Wojnar – took legal action over the theft of their protected health information. OakBend Medical Center.

HIPAA 102

HIPAA Fraud 102

HIPAA Journal

FEBRUARY 1, 2023

When a data breach occurs and sensitive information is disclosed, the HIPAA Breach Notification Rule requires affected individuals to be notified. The 2022 Data Breach Report from the Identity Theft Resource Center (ITRC) has confirmed this trend. The LastPass data breach was a good case in point.

Fraud 118

Fraud HIPAA Ransomware Compliance 118

HIPAA Journal

MARCH 7, 2023

The cyberattack in question occurred on December 1, 2022. Hackers gained access to the medical groups’ IT systems, preventing access to certain servers on December 2, 2022. The attempted fraudulent activity occurred between December 2022 and February 2023, before being informed by the defendants about the data breach.

Fraud 115

Fraud Health Insurance HIPAA Doctors 115

HIPAA Journal

JANUARY 10, 2023

An external investigation into credit card fraud pointed to Captify Health as the source of a data breach. The affected individuals were then identified and contact information was verified, and breach notification letters were sent on December 16, 2022.

HIPAA 106

HIPAA Doctors Fraud Compliance 106

HIPAA Journal

JANUARY 6, 2023

The Chicago, IL-based health system, CommonSpirit Health, is facing a class action lawsuit over its October 2022 ransomware attack. Malicious actors gained access to its IT systems on September 16, 2022, and deployed ransomware on October 2, 2022.

Ransomware 88

Ransomware Fraud Electronic Medical Records Hospitals 88

HIPAA Journal

DECEMBER 19, 2022

On September 9, 2022, 365 Data Centers notified Avem Health Partners that an unauthorized third party had gained access to its servers. The breach was detected on May 16, 2022, with the investigation confirming there may have been unauthorized access to data stored on those servers prior to May 14, 2022. The DOL and the U.S.

Fraud 99

Fraud Licensing HIPAA Health Insurance 99

HIPAA Journal

MARCH 21, 2023

ILS Identified the breach in July 2022 and determined unauthorized individuals had access to its network between June 30, 2022, and July 5, 2022. The post Independent Living Systems Sued Over 4 Million-Record Data Breach appeared first on HIPAA Journal.

Fraud 107

Fraud Health Insurance Medicaid Medicaid 107

HIPAA Journal

AUGUST 18, 2023

As the HHS’ Office for Civil Rights confirmed in 2022 guidance on HIPAA and tracking technologies, these tools can only be used if there is a HIPAA-compliant business relationship with the tracking technology vendor or if valid HIPAA authorizations have been obtained.

HIPAA 93

HIPAA Fraud Hospitals 93

HIPAA Journal

NOVEMBER 23, 2022

The attack occurred between January 26 and January 28, 2022, and while the attack was detected by the firm’s endpoint security solution shortly after the ransomware was executed, it was not possible to prevent the encryption of certain files on its network.

Ransomware 112

Ransomware Fraud Licensing HIPAA 112

YouCompli

JANUARY 4, 2022

This includes: Expanded capacity Burden Relief Provider enrollment relief Stark Law waivers HIPAA enforcement discretion Patient inducement enforcement discretion DEA waivers Expanded telehealth coverage. Her detailed slides are available from PYA here. They provide great insight for Compliance practitioners.

Compliance 40

Compliance Compliance Officers HIPAA Fraud 40

HIPAA Journal

MAY 1, 2023

Unauthorized system activity was detected on or around December 10, 2022, and the forensic investigation determined its systems had been accessed by unauthorized individuals between December 5, 2022, and December 10, 2022.

Fraud 72

Fraud HIPAA 72

HIPAA Journal

JANUARY 17, 2023

The security breach was detected on June 29, 2022, when staff members were prevented from accessing files. Leading third-party cybersecurity experts were engaged to investigate the incident and determine the nature and scope of the breach and confirmed that the threat actors had access to its network between June 15, 2022, and June 29, 2022.

Ransomware 109

Ransomware Fraud HIPAA Licensing 109

HIPAA Journal

APRIL 15, 2022

A lawsuit has been filed against the in-home respiratory care provider, SuperCare Health, over a cyberattack and data breach that was reported to the Department of Health and Human Services on March 28, 2022. The post SuperCare Health Sued Over 318,000-Record Data Breach appeared first on HIPAA Journal. The lawsuit, Vickey Angulo v.

Electronic Medical Records 120

Electronic Medical Records HIPAA Health Insurance Fraud 120

HIPAA Journal

FEBRUARY 14, 2023

Another lawsuit has been filed against Connexin Software over its August 2022 ransomware attack and data breach, which affected more than 2.2 On August 26, 2022, Connexin discovered hackers had gained access to its systems and used ransomware to encrypt files. Million-Record Data Breach appeared first on HIPAA Journal.

Electronic Medical Records 85

Electronic Medical Records Ransomware HIPAA Fraud 85

HIPAA Journal

JUNE 15, 2022

On May 27, 2022, the Massachusetts-based medical imaging service provider reported the data breach to the HHS’ Office for Civil Rights and confirmed that an unauthorized actor had access to some of its IT systems from March 7 to March 21, 2022.

Fraud 111

Fraud HIPAA 111

HIPAA Journal

APRIL 20, 2022

A comprehensive review of affected files was conducted, and that process was concluded on February 23, 2022. The notification letters state that credit monitoring, fraud consultation, and identity theft restoration services are being offered through Kroll for 12 months at no cost.

US Department of Health and Human Services 138

US Department of Health and Human Services Fraud HIPAA 138

HIPAA Journal

AUGUST 5, 2022

In a substitute breach notification, First Choice explained that unusual activity was detected within its technological environment on March 27, 2022. Affected individuals were notified about the breach by mail on August 1, 2022, and have been offered complimentary identity theft protection services through IDX.

Electronic Medical Records 96

Electronic Medical Records Health Insurance Fraud HIPAA 96

HIPAA Journal

FEBRUARY 16, 2023

Affected individuals were notified about the breach in March 2022, and were offered credit monitoring services for 12 months. The lawsuit also claims the health system failed to comply with the federal standards of HIPAA and had not followed FTC guidelines for protecting sensitive data. A lawsuit – McHenry v.

HIPAA 97

HIPAA Fraud Licensing Health Insurance 97

HIPAA Journal

OCTOBER 17, 2022

Valle de Sol did not state in its notification letters when hackers gained access to its network, or for how long they had access, but did confirm that the unauthorized activity was detected on January 25, 2022. A comprehensive review was conducted of all files that may have been accessed, which was completed on July 18, 2022.

Health Insurance 119

Health Insurance Licensing Fraud HIPAA 119

HIPAA Journal

SEPTEMBER 29, 2022

On May 18, 2022, Choice Health learned that a Choice Health database was accessible over the Internet, with the investigation confirming the misconfiguration was caused by a third-party service provider. The exposed database was detected by Choice Health on May 14, 2022, with the theft of database files identified on May 18.

Health Insurance 112

Health Insurance Medicare Medicare Fraud 112

HIPAA Journal

MARCH 30, 2023

On November 14, 2022, a hacker gained access to Rise’s network and accessed files containing sensitive patient data, including names, email addresses, phone numbers, provider information, diagnoses, expected delivery dates, and health insurance information.

Health Insurance 98

Health Insurance Fraud HIPAA 98

HIPAA Journal

MARCH 13, 2023

Revenetics is facing a class action lawsuit over its December 2022 cyberattack and data breach that affected more than 250,000 individuals. The post Revenetics Facing Class Action Lawsuit Over Royal Ransomware Attack and Data Breach appeared first on HIPAA Journal.

Ransomware 112

Ransomware Fraud HIPAA 112