HIPAA Journal

JULY 20, 2022

June 2022 saw 70 healthcare data breaches of 500 or more records reported to the Department of Health and Human Services’ Office for Civil Rights (OCR) – two fewer than May and one fewer than June 2021. That is the highest monthly total so far in 2022. Largest Healthcare Data Breaches Reported in June 2022. Ransomware attack.

Electronic Medical Records 114

Electronic Medical Records Ransomware HIPAA Hospitals 114

HIPAA Journal

MAY 25, 2023

CommonSpirit Health has provided an updated estimate on the cost of its October 2022 ransomware attack, which is expected to increase to $160 million. The ransomware attack was detected by CommonSpirit Health on October 2, 2022, forcing systems to be taken offline. The lawsuit was filed in December 2022 in the U.S.

Ransomware 118

Ransomware HIPAA Hospitals 118

HIPAA Journal

AUGUST 11, 2022

Between January 1, 2022, and June 30, 2022, 347 healthcare data breaches of 500 or more records were reported to the Department of Health and Human Services’ Office for Civil Rights (OCR) – the same number of data breaches reported in 2H, 2021. million, and the fall continued in 1H, 2022, when 20.2 Ransomware attack.

HIPAA 125

HIPAA Ransomware Electronic Medical Records Compliance 125

HIPAA Journal

MARCH 24, 2023

Ransomware activity increased in February according to the latest GRIT Ransomware Report from GuidePoint Security. increase in attacks compared to February 2022. There was a 21% decrease in Royal ransomware victims compared to January, but a massive 400% increase in BianLian victims. The LockBit 3.0

Ransomware 128

Ransomware HIPAA Public Health 128

HIPAA Journal

JUNE 21, 2022

May 2022 saw a 25% increase in healthcare data breaches of 500 or more records. 70 data breaches of 500 or more records were reported to the Department of Health and Human Services’ Office for Civil Rights (OCR) in May 2022, which is the highest monthly total this year and well above the 12-month average of 56.75 Ransomware attack.

Ransomware 129

Ransomware HIPAA Compliance 129

HIPAA Journal

JUNE 29, 2022

On June 25, 2022, a spokesperson for a threat group called DAIXIN Team contacted HIPAA Journal to share information about a ransomware attack and data theft incident at Fitzgibbon Hospital in Marshall, Missouri. DAIXIN Team was previously not known to HIPAA Journal and appears to be a new ransomware group.

Ransomware 120

Ransomware Hospitals HIPAA Health Insurance 120

HIPAA Journal

MARCH 10, 2023

Codman Square Health Center in Boston, MA, has confirmed that it was the victim of a ransomware attack in November 2022 in which hackers gained access to the protected health information of 10,161 current and former patients. The post Ransomware Attack Announced by Codman Square Health Center appeared first on HIPAA Journal.

Ransomware 115

Ransomware HIPAA 115

HIPAA Journal

NOVEMBER 23, 2022

As of November 23, 2022, there is no notification on the hospital’s website so details of the nature of the attack have yet to be made public by Doctors’ Center Hospital, with all current indicators suggesting this was a recent attack, and one which the hospital is likely still attempting to recover from.

Ransomware 132

Ransomware Hospitals Doctors HIPAA 132

HIPAA Journal

JANUARY 10, 2023

The latest data released by the cybersecurity firm Check Point has confirmed that 2022 was a particularly bad year for cyberattacks, which increased globally by 38% year-over-year fuelled by a sizeable increase in attacks on healthcare organizations. 2022 also saw two major milestones reached. million-record breach at Anthem Inc.

Ransomware 115

Ransomware HIPAA Hospitals Governance 115

HIPAA Journal

JULY 29, 2022

SonicWall has released a mid-year update to its 2022 Cyber Threat Report , which highlights the global cyberattack trends in H1 2022. million global sensors in 215 countries and shows a global fall in ransomware attacks, with notable increases in malware attacks for the first time in 3 years. Ransomware.

Ransomware 142

Ransomware Governance HIPAA 142

Healthcare IT Today

DECEMBER 22, 2023

Department of Health and Human Services (HHS) said it will update the HIPAA Security Rule in 2024 and will ask Congress for new laws and resources to increase civil money penalties for HIPAA violations, increase HIPAA enforcement, and conduct proactive audits.

HIPAA 107

HIPAA Ransomware Compliance Hospitals 107

HIPAA Journal

APRIL 26, 2023

Ransomware actors continue to target the U.S. These are some of the findings from the latest Global Threat Intelligence Report from Blackberry, which is based on threats detected by its Cylance Endpoint Security solution over 90 days from December 2022 to February 2023. per minute in the most recent reporting period.

Ransomware 110

Ransomware HIPAA Hospitals 110

HIPAA Journal

MAY 1, 2023

The Health Sector Cybersecurity and Coordination Center (HC3) has issued a fresh ransomware warning to the healthcare and public health (HPH) sector following a spate of attacks on the HPH sector in April by the Clop and LockBit ransomware groups. LockBit ransomware was deployed in some of the attacks.

Ransomware 109

Ransomware HIPAA Public Health 109

HIPAA Journal

DECEMBER 8, 2022

The New York ambulance service, Empress EMS, is facing multiple class action lawsuits over a ransomware attack that was detected on July 14, 2022. The Hive ransomware group was behind the attack, and as per the group’s modus operandi , after gaining access to the network, sensitive files were stolen, then files were encrypted.

Ransomware 104

Ransomware HIPAA Fraud 104

HIPAA Journal

DECEMBER 13, 2022

The Health Sector Cybersecurity Coordination Center (HC3) has released analyses of two ransomware variants that are being used in attacks on the healthcare sector: LockBit 3.0 LockBit ransomware was first detected in September 2019 when it was known as ABCD ransomware. and has code similar to DarkSide and BlackMatter ransomware.

Ransomware 130

Ransomware HIPAA 130

HIPAA Journal

DECEMBER 5, 2022

The Cuba ransomware group has increased attacks in the United States, with attacks doubling since December 2021, and ransom payments are also on the rise. According to CISA and the FBI, there are similarities between the infrastructure used by the Cuba ransomware operation and the RomCom RAT and Industrial Spy ransomware actors.

Ransomware 121

Ransomware Public Health HIPAA Governance 121

HIPAA Journal

MARCH 21, 2023

ransomware, also known as LockBit Black. The LockBit ransomware group has been in operation since at least September 2019 and is one of the most prolific ransomware groups. LockBit is a ransomware-as-a-service operation that recruits affiliates to conduct attacks in return for a cut of the ransoms they generate.

Ransomware 106

Ransomware Hospitals HIPAA 106

HIPAA Journal

DECEMBER 21, 2022

643 healthcare data breaches have been reported to the HHS’ Office for Civil Rights so far in 2022, which makes this year the second worst year to date for healthcare data breaches. So far in 2022, 44,852,648 healthcare records have been breached. Ransomware attack. Ransomware attack. million records a month.

Ransomware 100

Ransomware HIPAA Electronic Medical Records Doctors 100

HIPAA Journal

APRIL 8, 2024

The Medusa ransomware group has leaked data stolen from American Renal Associates. American Renal Associates American Renal Associates (ARA), one of the largest providers of dialysis services in the United States and a provider of care for patients suffering from end-stage renal disease has experienced a Medusa ransomware attack.

Ransomware 73

Ransomware Health Insurance Licensing HIPAA 73

HIPAA Journal

AUGUST 15, 2023

Tift Regional Medical Center in Georgia has started notifying 180,142 patients that their personal and protected health information was compromised in a cyberattack that was detected on or around August 16, 2022. ” The attack was conducted by the Hive ransomware group, which was the subject of a law enforcement takedown in January 2023.

Ransomware 95

Ransomware Electronic Medical Records HIPAA Medicaid 95

HIPAA Journal

MAY 25, 2022

The break-in was discovered on March 4, 2022, with the subsequent investigation confirming on April 22, 2022, that six boxes of paper documents had been stolen from the facility, which included files relating to patients served by SAC Health in 1997 and between 2006 and 2020. Lifespan Services Suffers Ransomware Attack.

Ransomware 129

Ransomware Fraud HIPAA Licensing 129

HIPAA Journal

FEBRUARY 9, 2024

The Healthcare and Public Health (HPH) Sector has been warned about cyberattacks involving Akira ransomware , of which there have been at least 81 since the new ransomware variant was discovered in May 2023. Akira is a ransomware-as-a-service (RaaS) operation that is thought to have ties to the Conti ransomware group.

Ransomware 73

Ransomware HIPAA Public Health 73

HIPAA Journal

FEBRUARY 22, 2022

50 healthcare data breaches of 500 or more records were reported to the HHS’ Office for Civil Rights (OCR) in January 2022. 726 data breaches of 500 or more records were reported to OCR in the 12 months from February 2021 to January 2022, and 42,175,121 records were breached across those 726 incidents. Ransomware attack.

Ransomware 106

Ransomware HIPAA Hospitals Compliance 106

HIPAA Journal

SEPTEMBER 19, 2022

The 25.75% percentage decrease from July 2022 was accompanied by a significant reduction in breached records, which dropped almost 30% month over month. Largest Healthcare Data Breaches Reported in August 2022. Ransomware attack. Ransomware attack on a business associate (OneTouchPoint). Ransomware attack.

Ransomware 106

Ransomware HIPAA Electronic Medical Records Compliance 106

HIPAA Journal

FEBRUARY 16, 2023

The October 2022 ransomware attack on CommonSpirit Health has cost the health system more than $150 million to date according to its recent quarterly filing, and the costs are continuing to increase as the investigation into the attack and data breach are ongoing. billion in the full fiscal year ending June 30, 2022, and $1.85

Ransomware 106

Ransomware HIPAA 106

HIPAA Journal

JULY 14, 2023

There has been a sizeable fall in revenues from cryptocurrency-related crimes in the first half of 2023, with scammers seeing a 77% reduction in revenues from the same period in 2022, amassing a little over $1 billion in the first half of the year compared to $3.3 billion in the first half of 2022.

Ransomware 83

Ransomware Fraud HIPAA 83

HIPAA Journal

DECEMBER 9, 2022

The Health Sector Cybersecurity Coordination Center (HC3) has issued a warning to the healthcare and public health (HPH) sector about Royal ransomware attacks. Royal ransomware is a new ransomware threat that was first observed being used in attacks in September 2022. Both will prevent files from being opened.

Ransomware 115

Ransomware HIPAA Public Health 115

HIPAA Journal

APRIL 19, 2022

In March 2022, 43 healthcare data breaches of 500 or more records were reported to the U.S. Largest Healthcare Data Breaches in March 2022. In March 2022, there were 25 data breaches reported to OCR that affected 10,000 or more individuals, all but one of which were hacking incidents. Ransomware attack (Conti).

Ransomware 127

Ransomware HIPAA Hospitals Compliance 127

HIPAA Journal

SEPTEMBER 12, 2023

Seymour, IN-based Schneck Medical Center has settled a lawsuit with the Indiana attorney general, Todd Rokita, over a 2021 ransomware attack and data breach that affected 89,707 Indiana residents. Schneck Medical Center Compensates Patients for Losses Schneck Medical Center has also recently settled a consolidated class action lawsuit for $1.3

HIPAA 91

HIPAA Ransomware Health Insurance Fraud 91

HIPAA Journal

MARCH 15, 2023

Cybersecurity and Infrastructure Agency (CISA) has launched a new pilot program in response to the increase in ransomware attacks on critical infrastructure entities. The program is focused on identifying vulnerabilities in Internet-facing systems that are known to have been exploited by ransomware gangs in previous attacks.

Ransomware 94

Ransomware Governance HIPAA Hospitals 94

HIPAA Journal

OCTOBER 21, 2022

So far in 2022, 31,705,618 patient records have been exposed or impermissibly disclosed. 30 data breaches of 10,000 or more patient records were reported to the HHS’ Office for Civil Rights in September 2022, all but one of which were hacking/IT incidents. Ransomware attack. Ransomware attack. Ransomware attack.

Ransomware 112

Ransomware HIPAA Compliance Hospitals 112

HIPAA Journal

JANUARY 17, 2023

While it is difficult to obtain accurate data on the number of ransomware attacks being conducted on healthcare organizations, the available data suggest there has been a decline in attacks across all industry sectors compared to the high number of attacks reported in 2021.

Ransomware 101

Ransomware HIPAA 101

HIPAA Journal

JUNE 6, 2022

Ransomware attacks on healthcare organizations increased by 94% year over year, according to the 2022 State of Ransomware Report from cybersecurity firm Sophos. This year’s report focused on the rapidly evolving relationship between ransomware and cyber insurance in healthcare.

Ransomware 131

Ransomware HIPAA 131

HIPAA Journal

JUNE 13, 2022

Yuma Regional Medical Center (YRMC) in Arizona has announced it was the victim of a ransomware attack in April in which the attackers obtained the protected health information of approximately 700,000 current and former patients. Ransomware attacks often result in the exposure of stolen data if the ransom is not paid.

Ransomware 128

Ransomware Electronic Medical Records HIPAA Health Insurance 128

HIPAA Journal

JULY 4, 2022

According to the company’s substitute breach notice, a sophisticated ransomware attack was detected and blocked on February 26, 2022; however, not in time to prevent some of its computer systems from being disabled. The investigation uncovered no evidence of misuse of patient data, but data theft and misuse could not be ruled out.

Ransomware 132

Ransomware HIPAA Health Insurance Governance 132

HIPAA Journal

FEBRUARY 27, 2023

The healthcare and public health (HPH) sector has been warned about cyberattacks involving MedusaLocker ransomware – one of the lesser-known ransomware variants used in cyberattacks on the sector. The ransomware variant was first detected in September 2019 and the group is thought to primarily target the HPH sector.

Ransomware 107

Ransomware HIPAA Public Health 107

HIPAA Journal

MARCH 16, 2023

The Health Sector Cybersecurity Coordination Center (HC3) has shared threat intelligence information about the Black Basta ransomware group to help network defenders prevent and rapidly detect attacks in progress. The Black Basta group was first identified in April 2022 and is known to conduct ransomware and extortion attacks.

Ransomware 102

Ransomware HIPAA Governance 102