HIPAA Journal

DECEMBER 23, 2022

It has been another bad year for healthcare data breaches, with some of the biggest HIPAA breaches of 2022 resulting in the impermissible disclosure of well over a million records. In addition to the high number of data breaches, 2022 stands out for the sheer number of healthcare records breached, which currently stands at 49.8

HIPAA 83

HIPAA Ransomware Health Insurance Compliance 83

Provider Trust

JANUARY 18, 2023

In October 2022, the South Carolina Medicaid Fraud Control Unit (SCMFCU) arrested a 37-year-old South Carolina woman named Alyssa Beth Steele for working as a registered nurse despite not having a license. Pursuant to federal regulations, the SCMFCU is authorized to investigate and prosecute any acts of Medicaid provider fraud.

Nurses 52

Nurses Licensing Fraud Medicaid 52

HIPAA Journal

DECEMBER 19, 2022

On September 9, 2022, 365 Data Centers notified Avem Health Partners that an unauthorized third party had gained access to its servers. The breach was detected on May 16, 2022, with the investigation confirming there may have been unauthorized access to data stored on those servers prior to May 14, 2022. The DOL and the U.S.

Fraud 96

Fraud Licensing HIPAA Health Insurance 96

HIPAA Journal

NOVEMBER 16, 2022

According to the breach report filed with the Maine Attorney General, it took until October 3, 2022, to confirm that an unauthorized third party had accessed the email system, which included sensitive information of its members. Notification letters were sent to affected individuals on October 31, 2022.

HIPAA 88

HIPAA Licensing Health Insurance Fraud 88

HIPAA Journal

AUGUST 2, 2023

Notification letters will be sent to the affected individuals in the coming weeks and credit monitoring, fraud consultation, and identity theft restoration services will be offered. A third-party data review company was provided with the files on December 22, 2022, and provided the results of the analysis to SHS on May 16, 2023.

Licensing 73

Licensing Electronic Medical Records Ransomware Health Insurance 73

HIPAA Journal

OCTOBER 17, 2022

Valle de Sol did not state in its notification letters when hackers gained access to its network, or for how long they had access, but did confirm that the unauthorized activity was detected on January 25, 2022. A comprehensive review was conducted of all files that may have been accessed, which was completed on July 18, 2022.

Health Insurance 117

Health Insurance Licensing Fraud HIPAA 117

HIPAA Journal

SEPTEMBER 9, 2022

That process concluded on June 24, 2022. Those emails contained patient information such as names, dates of birth, Social Security numbers, medical information, health insurance information, driver’s license numbers, and state ID numbers. The information exposed varied from patient to patient.

Licensing 102

Licensing Health Insurance Fraud HIPAA 102

Healthcare Compliance Blog

MARCH 10, 2022

Complaints of resident abuse in a Michigan nursing home led to an investigation by the Michigan Office of Attorney General’s Health Care Fraud Division, working with the Michigan Sentinel Project. The investigation determined that a nurse was working at the nursing home while her license was suspended, which is a felony.

Nursing Homes 59

Nursing Homes Nurses Licensing Fraud 59

HIPAA Journal

NOVEMBER 23, 2022

The attack occurred between January 26 and January 28, 2022, and while the attack was detected by the firm’s endpoint security solution shortly after the ransomware was executed, it was not possible to prevent the encryption of certain files on its network.

Ransomware 109

Ransomware Fraud Licensing HIPAA 109

HIPAA Journal

JANUARY 17, 2023

The security breach was detected on June 29, 2022, when staff members were prevented from accessing files. Leading third-party cybersecurity experts were engaged to investigate the incident and determine the nature and scope of the breach and confirmed that the threat actors had access to its network between June 15, 2022, and June 29, 2022.

Ransomware 106

Ransomware Fraud HIPAA Licensing 106

Provider Trust

JULY 26, 2022

On June 7, 2022, Theresa Pickering of Norcross, Georgia was indicted by a federal grand jury on federal charges of health care fraud, aggravated identity theft, and distribution of controlled substances. In addition to these allegations of fraud, waste, and abuse, Pickering had a history of fraud. According to the U.S.

Licensing 52

Licensing Fraud Compliance Nurses 52

HIPAA Journal

JULY 20, 2022

While data theft could not be determined, the affected email accounts contained the protected health information of patients of 19 of its hospitals, including names, birth dates, health insurance information, Social Security numbers, driver’s license, and healthcare data. The lawsuit, filed in the Circuit Court of the City of St.

Fraud 113

Fraud Licensing HIPAA Health Insurance 113

HIPAA Journal

MAY 25, 2022

The break-in was discovered on March 4, 2022, with the subsequent investigation confirming on April 22, 2022, that six boxes of paper documents had been stolen from the facility, which included files relating to patients served by SAC Health in 1997 and between 2006 and 2020. Lifespan Services Suffers Ransomware Attack.

Ransomware 127

Ransomware Fraud HIPAA Licensing 127

Healthcare IT Today

FEBRUARY 9, 2024

A 2022 Deloitte survey of U.S. Even worse, up to 10% of this spending is rife with waste, abuse, and fraud. For health payers and agencies, AI so far has been mostly applied to claims processing, member engagement, and identification of suspected cases of fraud, waste, and abuse. In other words, nearly half of all U.S.

Fraud 108

Fraud Governance Hospitals Licensing 108

Verisys

FEBRUARY 16, 2023

Transition Process Oregon: License Suspensions and Terminations of Orders by Operation of Law and Continuing Education Deficiencies: Oregon Administrative Rule 847-001-0035 has been amended to expand the reasons for which the Executive Director or Medical Director may issue final orders.

Licensing 52

Licensing Nurses Fraud Compliance 52

HIPAA Journal

FEBRUARY 16, 2023

The investigation confirmed hackers had access to, and potentially stole, the protected health information of patients such as names, Social Security numbers, driver’s license information, dates of birth, health insurance, medical treatment information, and financial account information. A lawsuit – McHenry v.

HIPAA 95

HIPAA Fraud Licensing Health Insurance 95

HIPAA Journal

MARCH 25, 2022

Ultimate Care said no reports have been received that indicate there has been any misuse of patient information; however, as a precaution against identity theft and fraud, individuals whose Social Security numbers were impacted have been offered complimentary one-year memberships with a credit monitoring service.

Health Insurance 110

Health Insurance Licensing Ransomware Fraud 110

HIPAA Journal

APRIL 15, 2022

A lawsuit has been filed against the in-home respiratory care provider, SuperCare Health, over a cyberattack and data breach that was reported to the Department of Health and Human Services on March 28, 2022. A subset of individuals also had their Social Security numbers and/or driver’s license numbers exposed.

Electronic Medical Records 117

Electronic Medical Records HIPAA Health Insurance Fraud 117

HIPAA Journal

SEPTEMBER 12, 2023

The information stolen in the attack included names, addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account information, payment card information, diagnoses, and health insurance information.

HIPAA 89

HIPAA Ransomware Health Insurance Fraud 89

HIPAA Journal

NOVEMBER 15, 2022

Anesthesiology firms started reporting data breaches to the Department of Health and Human Services’ Office for Civil Rights in September 2022, with the notification letters to patients indicating there had been a data breach at their anesthesia management services organization. The notification letters failed to name that company.

HIPAA 84

HIPAA Fraud Licensing Health Insurance 84

HIPAA Journal

MARCH 22, 2023

The plaintiff and class members now face an increased risk of identity theft and fraud as their private information is now in the hand of cybercriminals. Cardiovascular Associates in Alabama is facing a class action lawsuit over a recently reported hacking incident in which patients protected health information (PHI) was stolen.

HIPAA 97

HIPAA Fraud Licensing Health Insurance 97

HIPAA Journal

DECEMBER 7, 2022

In October 2022, Urology of Greater Atlanta in Georgia reported a data breach to the HHS’ Office for Civil Rights that had affected 79,795 patients. In some cases, Social Security numbers, driver’s license numbers, or financial account information, were also exposed. At the time it was unclear exactly how that information was breached.

COVID-19 Vaccine 85

COVID-19 Vaccine COVID-19 Department of Veterans Affairs Licensing 85

HIPAA Journal

SEPTEMBER 28, 2022

At the time of issuing notifications, Wolfe Clinic had not received any reports of identity theft and fraud related to the Eye Care Leaders data breach. Reiter Affiliated Companies Reports June 2022 Cyberattack. The attack was detected on July 4, 2022, when certain systems were made unavailable. million patients.

Electronic Medical Records 77

Electronic Medical Records Ransomware Fraud HIPAA 77

Hall Render

SEPTEMBER 16, 2022

Full 4th Circuit to tackle Medicaid fraud standard under False Claims Act. Massachusetts nurse pleads guilty in $100M fraud scheme. Health care industry in Nebraska ‘thankful’ after licensing backlog averted. NewYork-Presbyterian/Queens Hospital settles federal healthcare fraud allegations for $2.5M.

US Department of Health and Human Services 40

US Department of Health and Human Services COVID-19 Nurses Nursing Homes 40

Healthcare Compliance Blog

MARCH 11, 2022

A Boston registered nurse (RN) has pled guilty to one count of tampering with a consumer product and one count of obtaining a controlled substance by fraud and deception. The RN is scheduled for sentencing in August 2022. On November 6, 2020, the RN was working the night shift on a dementia unit in the nursing home.

Nurses 59

Nurses Nursing Homes Fraud Licensing 59

HIPAA Journal

APRIL 18, 2023

The lawsuit was filed in response to a breach of a Microsoft 365-hosted business email account that was detected on April 14, 2022. The lawsuit alleges the plaintiff and class members face imminent and impending injury from the increased risk of identity theft and fraud. Klinger of Milberg Coleman Bryson Phillips Grossman.

HIPAA 81

HIPAA Fraud Licensing Health Insurance 81

Provider Trust

AUGUST 9, 2023

The Department of Health and Human Services (HHS) Office of Inspector General (OIG) has released its latest 2023 Spring Semiannual Report to Congress, providing a comprehensive overview of its activities from October 2022 to March 2023. OIG continues to work tirelessly to identify instances of fraud, waste, and abuse and prosecute offenders.

Nursing Homes 52

Nursing Homes COVID-19 Fraud Medicaid 52

HIPAA Journal

MARCH 2, 2023

A third-party cybersecurity firm assisted with the investigation but found no instances of fraud or identity theft; however, as a precaution, the 21,325 affected patients have been offered complimentary credit monitoring and identity theft protection services.

Medicare 72

Medicare Medicare Fraud HIPAA 72

HIPAA Journal

SEPTEMBER 9, 2022

That process concluded on June 24, 2022. Those emails contained patient information such as names, dates of birth, Social Security numbers, medical information, health insurance information, driver’s license numbers, and state ID numbers. The information exposed varied from patient to patient.

Fraud 52

Fraud Licensing HIPAA Health Insurance 52

Healthcare IT News - Telehealth

JUNE 8, 2022

While it is important to carefully consider the most effective methods of providing care and the intended purpose behind various reimbursement, privacy, and fraud and abuse regulations, it is also clear that healthcare delivery has always and continues to evolve, and the regulatory framework needs to do the same. Federal rules.

US Department of Health and Human Services 186

US Department of Health and Human Services Compliance Overpayments Overpayment 186

HIPAA Journal

APRIL 1, 2022

On March 24, 2022, SRHD announced that its IT department discovered a compromised email account, with the investigation recently confirming that the employee responded to a phishing email on February 24, 2022, and disclosed credentials that allowed the account to be accessed.

Fraud 130

Fraud HIPAA Licensing Health Insurance 130

HIPAA Journal

JULY 27, 2023

The stolen information included names, addresses, email addresses, dates of birth, Social Security numbers, government identification ID numbers, driver’s license numbers, payment/financial institution information, health insurance providers, medical treatment information, medical diagnoses, medications, medical images, and lab test results.

Ransomware 52

Ransomware Fraud Licensing Health Insurance 52

Hall Render

APRIL 22, 2022

21 top management risks in healthcare for 2022. $1B Report: Black Women’s Health in AR in “Critical State” Arkansas Children’s Names Jefferson, Rumpel as 2022 Marion B. Colorado Springs health clinic to pay settlement in fraud lawsuit. Primary Health opening new Nampa clinic in late 2022. CONNECTICUT.

COVID-19 40

COVID-19 Nursing Homes US Department of Health and Human Services Nurses 40

HIPAA Journal

JULY 4, 2023

As a precaution against identity theft and fraud, affected individuals have been offered 24 months of complimentary credit monitoring services. In March 2022, an unauthorized individual accessed the email account of an employee.

Medicaid 74

Medicaid Medicaid Health Insurance Licensing 74

HIPAA Journal

APRIL 25, 2023

The email account breach was detected on February 13, 2023, and the forensic investigation confirmed the email account was accessed between June 16, 2022, and July 18, 2022. TRPHD said suspicious activity was detected within its server infrastructure on November 9, 2022.

Health Insurance 86

Health Insurance Public Health Ransomware Fraud 86

Verisys

FEBRUARY 24, 2023

Worst of all, she learns two months later that her primary care physician, who’d suggested she consider surgery, had sanctions against his license in another state and shouldn’t have been practicing medicine in the first place. Estimates range from 3% – 10% of the entire federal healthcare funding lost to fraud, waste, and abuse.

Fraud 52

Fraud Doctors Governance Licensing 52

Verisys

FEBRUARY 24, 2023

Worst of all, she learns two months later that her primary care physician, who’d suggested she consider surgery, had sanctions against his license in another state and shouldn’t have been practicing medicine in the first place. Estimates range from 3% – 10% of the entire federal healthcare funding lost to fraud, waste, and abuse.

Fraud 52

Fraud Doctors Governance Licensing 52