HIPAA Journal

SEPTEMBER 7, 2023

El Centro Del Barrio, dba CentroMed in San Antonio, TX, is facing at least two class action lawsuits over a June 2023 cyberattack in which hackers gained access to the personal and protected health information (PHI) of 350,000 patients. The affected individuals were notified by mail on August 11, 2023.

HIPAA 88

HIPAA Health Insurance Fraud 88

Provider Trust

FEBRUARY 3, 2023

In a recent webinar, ProviderTrust took a look at impactful healthcare trends to monitor in 2023 and beyond. Six health systems either reduced services, closed hospitals or practice locations, while five health systems re-engineered leadership and/or their corporate structure to save money.

Compliance 52

Compliance Fraud Nurses Telemedicine 52

Medisys Compliance

JANUARY 30, 2023

HIPAA: The Health Insurance Portability and Accountability Act( HIPAA) is a federal law that establishes the national standards for protecting the privacy and security of individuals’ personal health information ( PHI). Let us discuss the top compliance issues in the medical billing industry, shall we?

Compliance 52

Compliance Medical Billing Medical Billing Outsourcing HIPAA 52

Innovaare Compliance

MARCH 24, 2024

The Importance of Payment Integrity Payment integrity is crucial for health plans to control costs, reduce fraud, waste, and abuse (FWA), and ensure the accuracy of healthcare payments. billion in healthcare fraud judgments and settlements. billion in healthcare fraud judgments and settlements.

Fraud 52

Fraud Health Insurance Compliance Medicaid 52

HIPAA Journal

FEBRUARY 22, 2023

On February 10, 2023, CentraState confirmed it had suffered a ransomware attack that disrupted its computer systems. The health system detected the attack on December 29, 2022, blocked the unauthorized access, and launched an investigation to determine the nature and scope of the breach.

Ransomware 95

Ransomware Fraud Health Insurance HIPAA 95

HIPAA Journal

MARCH 30, 2023

On November 14, 2022, a hacker gained access to Rise’s network and accessed files containing sensitive patient data, including names, email addresses, phone numbers, provider information, diagnoses, expected delivery dates, and health insurance information.

Health Insurance 94

Health Insurance Fraud HIPAA 94

HIPAA Journal

JUNE 28, 2023

Individuals that have suffered identity theft, medical fraud, tax fraud, other forms of fraud, and other actual misuses of their personal information, can submit claims for documented, unreimbursed extraordinary losses that are reasonably traceable to the data breach of up to a maximum of $5,000.

Hospitals 78

Hospitals Fraud Licensing HIPAA 78

HIPAA Journal

JUNE 13, 2023

Harvard Pilgrim Health Care and its parent company, Point32Health, are facing multiple class action lawsuits after hackers gained access to the protected health information (PHI) of more than 2.5 million individuals in an April 2023 ransomware attack. Harvard Pilgrim Health Care Inc. Harvard Pilgrim Health Care, Inc.

Ransomware 96

Ransomware Fraud Health Insurance HIPAA 96

HIPAA Journal

FEBRUARY 8, 2024

Azura Vascular Care, a Pennsylvania-based operator of 70 outpatient vascular centers and ambulatory surgery centers in 25 states and Puerto Rico, notified the HHS’ Office for Civil Rights last month about a cybersecurity incident involving the protected health information of 348,000 patients. The incident was detected on November 9, 2023.

Ransomware 82

Ransomware Electronic Medical Records Licensing Health Insurance 82

HIPAA Journal

MAY 10, 2023

Suspicious activity was detected within its computer systems on February 1, 2023, and third-party cybersecurity experts were engaged to conduct a forensic analysis of the incident to determine the nature and scope of the attack. The investigation concluded on March 3, 2023, that files within its network were accessed.

Hospitals 96

Hospitals Ransomware Health Insurance Fraud 96

HIPAA Journal

JUNE 15, 2023

Johns Hopkins University and Johns Hopkins Health System are investigating a May 31, 2023, cyberattack and data breach that targeted a widely used software tool. The security breach was discovered on April 4, 2023, and unauthorized access was immediately blocked. Notifies 24,400 Individuals About Data Breach iSpace, Inc.,

Ransomware 98

Ransomware Health Insurance Fraud HIPAA 98

Bill of Health

OCTOBER 30, 2023

By Bobby Stroup 2023 is the year of the emoji lawsuit. In another legal case, a “moon” emoji was found to be possible evidence of securities fraud. In health care, complexity is everywhere. Health insurance is confusing. Notes about our health can be difficult to understand.

Doctors 284

Doctors Hospitals Fraud Health Insurance 284

HIPAA Journal

MAY 25, 2023

In April 2023, Point32Health, the second-largest health insurer in Massachusetts and the parent company of Tufts Health Plan and Harvard Pilgrim Health Care, announced it suffered a ransomware attack that resulted in system outages, including the systems that serviced members, accounts, brokers, and providers.

Ransomware 80

Ransomware Health Insurance Fraud HIPAA 80

HIPAA Journal

MAY 17, 2023

In April 2023, the Money Message ransomware group announced it had breached the systems of PharMerica and its parent company, BrightSpring Health Services, and added both to its data leak site. That makes it the largest healthcare data breach to be reported by a single HIPAA-covered entity so far in 2023.

Ransomware 95

Ransomware HIPAA Fraud Health Insurance 95

HIPAA Journal

APRIL 25, 2023

Santa Clara Family Health Plan Confirmed as Victim of Clop GoAnywhere Hack Santa Clara Family Health Plan has confirmed the 276,993-record data breach reported to the HHS’ Office for Civil Rights on March 30, 2023, was due to the hacking of Fortra’s GoAnywhere MFT solution by the Clop ransomware group.

Health Insurance 84

Health Insurance Public Health Ransomware Fraud 84

HIPAA Journal

MARCH 1, 2023

The Albuquerque, NM-based health insurance provider, True Health New Mexico, has proposed a settlement to resolve claims related to a 2021 data breach that affected 62,983 members of its health plans. The deadline for objection to or exclusion from the settlement is April 14, 2023.

Fraud 97

Fraud Ransomware Health Insurance HIPAA 97

HIPAA Journal

FEBRUARY 14, 2023

Hackers gained access to Umass Memorial Health’s email environment between June 24, 2020 and January 7, 2021, as a result of responses to phishing emails. Claims may also be submitted for extraordinary losses up to a maximum of $5,000, which can include documented, unreimbursed losses to fraud and identity theft.

Fraud 91

Fraud Licensing Health Insurance HIPAA 91

HIPAA Journal

MARCH 7, 2023

The cyberattack was detected on December 8, 2022, by which time the hackers had access to a huge amount of sensitive patient data, including full names, contact information, Social Security numbers, diagnoses, treatment information, medications, lab test results, radiology reports, and health insurance information.

Fraud 110

Fraud Health Insurance HIPAA Doctors 110

HIPAA Journal

APRIL 5, 2024

In 2022, the plaintiffs moved to certify three classes, one for each cause of action; however, in March 2023, District Court Judge Christopher Cooper denied the plaintiffs’ motion to certify two consumer classes and one contract class without prejudice, allowing the plaintiffs to file a renewed and modified motion which they did.

Fraud 67

Fraud HIPAA Health Insurance Compliance 67

HIPAA Journal

AUGUST 2, 2023

The Chattanooga Heart Institute (CHI) in Tennessee has recently announced that it identified a cyberattack on its network on April 17, 2023. Notification letters will be sent to the affected individuals in the coming weeks and credit monitoring, fraud consultation, and identity theft restoration services will be offered.

Licensing 72

Licensing Electronic Medical Records Ransomware Health Insurance 72

HIPAA Journal

SEPTEMBER 13, 2023

A class action lawsuit has been filed against the student healthcare insurer UnitedHealthcare Services, which does business as UnitedHealthcare Student Resources, over its MOVEit Transfer data breach in May 2023.

Ransomware 67

Ransomware Fraud Health Insurance HIPAA 67

HIPAA Journal

FEBRUARY 15, 2023

The attack was detected and blocked by Electromed on June 16, 2021, and the forensic investigation confirmed that files were accessed – and potentially stolen – that included customers’ first and last names, mailing addresses, medical information, and health insurance information.

Ransomware 84

Ransomware Fraud Licensing Health Insurance 84

HIPAA Journal

MAY 1, 2023

The document review took until March 21, 2023, and notification letters were sent on April 20, 2023. The information exposed and potentially stolen in the attack included names, dates of birth, billing and claims data, treatment details, medical record numbers, prescriptions, health insurance information, and Social Security numbers.

Health Insurance 56

Health Insurance Fraud HIPAA Hospitals 56

HIPAA Journal

JULY 4, 2023

Murfreesboro Medical Clinic & SurgiCenter (MMC) in Tennessee has recently confirmed that the protected health information of more than half a million patients was compromised in what it describes as “a series of attacks on our network and IT systems,” which were discovered on or around April 24, 2023.

Medicaid 73

Medicaid Medicaid Health Insurance Licensing 73

HIPAA Journal

DECEMBER 27, 2022

The breached information included names, addresses, Social Security numbers, birthdates, client identification numbers, medical diagnostic and treatment information, and health insurance information. Class members have until February 7, 2023, to object to or exclude themselves from the settlement.

Fraud 108

Fraud HIPAA Health Insurance 108

HIT Consultant

JANUARY 3, 2023

But they have also expanded the attack surface at these organizations and increased the level of risk and vulnerabilities that could result in direct loss of proprietary information, direct financial damage including theft and fraud, and potential loss of life (in addition to regulatory fines and brand damage) the healthcare sector faces.

Compliance 52

Compliance Ransomware Fraud Regulatory Compliance 52

HIPAA Journal

JANUARY 31, 2023

The lawsuit alleged the plaintiff and class members now face a high risk of identity theft and fraud as a result of the data breach and have incurred out-of-pocket expenses and lost time securing their accounts and protecting against the misuse of their personal and protected health information.

Ransomware 60

Ransomware Fraud Health Insurance HIPAA 60

HIPAA Journal

FEBRUARY 16, 2023

The investigation confirmed hackers had access to, and potentially stole, the protected health information of patients such as names, Social Security numbers, driver’s license information, dates of birth, health insurance, medical treatment information, and financial account information.

HIPAA 93

HIPAA Fraud Licensing Health Insurance 93

HIPAA Journal

JUNE 23, 2023

Intellihartx, a revenue cycle management company, said protected health information was compromised in the January 30, 2023 cyberattack, including names, contact information, insurance information, diagnoses, medications, dates of birth, and Social Security numbers. The lawsuit, Laren Perrone v.

HIPAA 88

HIPAA Ransomware Fraud Health Insurance 88

HIPAA Journal

AUGUST 30, 2023

Progress Software issued a security alert about the vulnerability on May 31, 2023, and released a patch the same day; however, the vulnerability had already been exploited in attacks by the Clop group, resulting in the theft of sensitive data. The breach was reported to the HHS’ Office for Civil Rights as affecting 531,732 individuals.

HIPAA 77

HIPAA Fraud Health Insurance 77

MedTrainer

JANUARY 31, 2024

It was passed to combat fraud by government contractors during the conflict and set the stage for future compliance regulations. These laws require healthcare providers to establish internal controls and compliance programs to prevent fraud and abuse in the healthcare system. Who started the first healthcare compliance program?

Compliance 52

Compliance Fraud Governance ACA 52

HIPAA Journal

MARCH 29, 2024

This is not the first attack of this kind to affect the Department of Mental Health. Similar attacks occurred on October 6, 2023, and October 24, 2023. Only one report is currently showing on the HHS’ Office for Civil Rights breach portal – dated December 22, 2023 – indicating 1,284 individuals were affected.

Fraud 64

Fraud HIPAA Health Insurance Nurses 64

HIPAA Journal

MARCH 21, 2023

During that time they exfiltrated files that contained sensitive patient data, including names, contact information, Social Security number, Medicare/Medicaid IDs, health information, and health insurance information.

Fraud 102

Fraud Health Insurance Medicaid Medicaid 102

HIPAA Journal

JANUARY 25, 2023

Logan Health Medical Center – was filed against Logan Health in the Montana Eighth Judicial District Court shortly after notification letters were mailed. Logan Health chose to settle the lawsuit to avoid further legal costs and the uncertainty of trial. The post Logan Health Proposes $4.3

Medical Billing 84

Medical Billing Fraud HIPAA Health Insurance 84

HIPAA Journal

SEPTEMBER 12, 2023

Schneck Medical Center has agreed to pay a penalty of $250,000 to resolve alleged violations of the Health Insurance Portability and Accountability Act (HIPAA) and state laws and will implement additional safeguards to prevent further data breaches.

HIPAA 87

HIPAA Ransomware Health Insurance Fraud 87

Hall Render

FEBRUARY 3, 2023

Daytona Beach medical office building/surgery center HCA Healthcare breaks ground on new freestanding ER in Orlando Lee Health’s new state-of-the-art bloodmobile hits the road Naples physician charged with Medicare fraud gives up license; enters guilty plea Nemours opens full-time office for children in Panama City with St.

US Department of Health and Human Services 40

US Department of Health and Human Services COVID-19 Nursing Homes Nurses 40

HIPAA Journal

MARCH 22, 2023

The lawsuit was filed on March 15, 2023, by the law firm Milberg Coleman Bryson Phillips Grossman PLLC on behalf of plaintiff, Samuel Lee. The plaintiff and class members now face an increased risk of identity theft and fraud as their private information is now in the hand of cybercriminals.

HIPAA 94

HIPAA Fraud Licensing Health Insurance 94