HIPAA Journal

SEPTEMBER 7, 2023

El Centro Del Barrio, dba CentroMed in San Antonio, TX, is facing at least two class action lawsuits over a June 2023 cyberattack in which hackers gained access to the personal and protected health information (PHI) of 350,000 patients. The affected individuals were notified by mail on August 11, 2023.

HIPAA 85

HIPAA Health Insurance Fraud 85

HIPAA Journal

OCTOBER 21, 2022

There are – and always have been – gaps in HIPAA and, after more than a quarter of a century, some have yet to be addressed. Most of the gaps in HIPAA are attributable to omissions from the original Act, provisions of HIPAA and HITECH that have never been enacted, and the increasing use of technology in healthcare.

HIPAA 95

HIPAA Compliance Medicare Medicare 95

Medisys Compliance

JANUARY 30, 2023

HIPAA: The Health Insurance Portability and Accountability Act( HIPAA) is a federal law that establishes the national standards for protecting the privacy and security of individuals’ personal health information ( PHI). We at Medisys Data Solutions understand the importance of HIPAA compliance.

Compliance 52

Compliance Medical Billing Medical Billing Outsourcing HIPAA 52

HIPAA Journal

JUNE 13, 2023

Harvard Pilgrim Health Care and its parent company, Point32Health, are facing multiple class action lawsuits after hackers gained access to the protected health information (PHI) of more than 2.5 million individuals in an April 2023 ransomware attack. Harvard Pilgrim Health Care Inc. Harvard Pilgrim Health Care, Inc.

Ransomware 94

Ransomware Fraud Health Insurance HIPAA 94

HIPAA Journal

FEBRUARY 22, 2023

On February 10, 2023, CentraState confirmed it had suffered a ransomware attack that disrupted its computer systems. The health system detected the attack on December 29, 2022, blocked the unauthorized access, and launched an investigation to determine the nature and scope of the breach.

Ransomware 91

Ransomware Fraud Health Insurance HIPAA 91

HIPAA Journal

JUNE 28, 2023

Individuals that have suffered identity theft, medical fraud, tax fraud, other forms of fraud, and other actual misuses of their personal information, can submit claims for documented, unreimbursed extraordinary losses that are reasonably traceable to the data breach of up to a maximum of $5,000.

Hospitals 76

Hospitals Fraud Licensing HIPAA 76

HIPAA Journal

MARCH 30, 2023

On November 14, 2022, a hacker gained access to Rise’s network and accessed files containing sensitive patient data, including names, email addresses, phone numbers, provider information, diagnoses, expected delivery dates, and health insurance information.

Health Insurance 91

Health Insurance Fraud HIPAA 91

HIPAA Journal

JUNE 15, 2023

Johns Hopkins University and Johns Hopkins Health System are investigating a May 31, 2023, cyberattack and data breach that targeted a widely used software tool. The security breach was discovered on April 4, 2023, and unauthorized access was immediately blocked. Notifies 24,400 Individuals About Data Breach iSpace, Inc.,

Ransomware 96

Ransomware Health Insurance Fraud HIPAA 96

HIPAA Journal

MAY 25, 2023

In April 2023, Point32Health, the second-largest health insurer in Massachusetts and the parent company of Tufts Health Plan and Harvard Pilgrim Health Care, announced it suffered a ransomware attack that resulted in system outages, including the systems that serviced members, accounts, brokers, and providers.

Ransomware 78

Ransomware Health Insurance Fraud HIPAA 78

HIPAA Journal

FEBRUARY 8, 2024

Azura Vascular Care, a Pennsylvania-based operator of 70 outpatient vascular centers and ambulatory surgery centers in 25 states and Puerto Rico, notified the HHS’ Office for Civil Rights last month about a cybersecurity incident involving the protected health information of 348,000 patients. The incident was detected on November 9, 2023.

Ransomware 79

Ransomware Electronic Medical Records Licensing Health Insurance 79

HIPAA Journal

JUNE 23, 2023

Intellihartx, a revenue cycle management company, said protected health information was compromised in the January 30, 2023 cyberattack, including names, contact information, insurance information, diagnoses, medications, dates of birth, and Social Security numbers. The lawsuit, Laren Perrone v.

HIPAA 86

HIPAA Ransomware Fraud Health Insurance 86

HIPAA Journal

AUGUST 30, 2023

Progress Software issued a security alert about the vulnerability on May 31, 2023, and released a patch the same day; however, the vulnerability had already been exploited in attacks by the Clop group, resulting in the theft of sensitive data. The breach was reported to the HHS’ Office for Civil Rights as affecting 531,732 individuals.

HIPAA 76

HIPAA Fraud Health Insurance 76

Innovaare Compliance

MARCH 24, 2024

The Importance of Payment Integrity Payment integrity is crucial for health plans to control costs, reduce fraud, waste, and abuse (FWA), and ensure the accuracy of healthcare payments. billion in healthcare fraud judgments and settlements. billion in healthcare fraud judgments and settlements.

Fraud 52

Fraud Health Insurance Compliance Medicaid 52

HIPAA Journal

FEBRUARY 14, 2023

Hackers gained access to Umass Memorial Health’s email environment between June 24, 2020 and January 7, 2021, as a result of responses to phishing emails. Claims may also be submitted for extraordinary losses up to a maximum of $5,000, which can include documented, unreimbursed losses to fraud and identity theft.

Fraud 88

Fraud Licensing Health Insurance HIPAA 88

HIPAA Journal

FEBRUARY 16, 2023

The investigation confirmed hackers had access to, and potentially stole, the protected health information of patients such as names, Social Security numbers, driver’s license information, dates of birth, health insurance, medical treatment information, and financial account information.

HIPAA 90

HIPAA Fraud Licensing Health Insurance 90

HIPAA Journal

AUGUST 2, 2023

The Chattanooga Heart Institute (CHI) in Tennessee has recently announced that it identified a cyberattack on its network on April 17, 2023. Notification letters will be sent to the affected individuals in the coming weeks and credit monitoring, fraud consultation, and identity theft restoration services will be offered.

Licensing 71

Licensing Electronic Medical Records Ransomware Health Insurance 71

HIPAA Journal

DECEMBER 27, 2022

The breached information included names, addresses, Social Security numbers, birthdates, client identification numbers, medical diagnostic and treatment information, and health insurance information. Class members have until February 7, 2023, to object to or exclude themselves from the settlement.

Fraud 105

Fraud HIPAA Health Insurance 105

HIPAA Journal

SEPTEMBER 13, 2023

A class action lawsuit has been filed against the student healthcare insurer UnitedHealthcare Services, which does business as UnitedHealthcare Student Resources, over its MOVEit Transfer data breach in May 2023. The post UnitedHealthcare Services Sued for MOVEit Transfer Data Breach appeared first on HIPAA Journal. and Mark S.

Ransomware 65

Ransomware Fraud Health Insurance HIPAA 65

HIPAA Journal

MAY 1, 2023

The document review took until March 21, 2023, and notification letters were sent on April 20, 2023. The information exposed and potentially stolen in the attack included names, dates of birth, billing and claims data, treatment details, medical record numbers, prescriptions, health insurance information, and Social Security numbers.

Health Insurance 55

Health Insurance Fraud HIPAA Hospitals 55

HIPAA Journal

APRIL 25, 2023

Santa Clara Family Health Plan Confirmed as Victim of Clop GoAnywhere Hack Santa Clara Family Health Plan has confirmed the 276,993-record data breach reported to the HHS’ Office for Civil Rights on March 30, 2023, was due to the hacking of Fortra’s GoAnywhere MFT solution by the Clop ransomware group.

Health Insurance 81

Health Insurance Public Health Ransomware Fraud 81

HIPAA Journal

MARCH 7, 2023

The cyberattack was detected on December 8, 2022, by which time the hackers had access to a huge amount of sensitive patient data, including full names, contact information, Social Security numbers, diagnoses, treatment information, medications, lab test results, radiology reports, and health insurance information.

Fraud 106

Fraud Health Insurance HIPAA Doctors 106

HIPAA Journal

FEBRUARY 15, 2023

The attack was detected and blocked by Electromed on June 16, 2021, and the forensic investigation confirmed that files were accessed – and potentially stolen – that included customers’ first and last names, mailing addresses, medical information, and health insurance information.

Ransomware 81

Ransomware Fraud Licensing Health Insurance 81

HIPAA Journal

MARCH 22, 2023

The lawsuit was filed on March 15, 2023, by the law firm Milberg Coleman Bryson Phillips Grossman PLLC on behalf of plaintiff, Samuel Lee. The plaintiff and class members now face an increased risk of identity theft and fraud as their private information is now in the hand of cybercriminals.

HIPAA 91

HIPAA Fraud Licensing Health Insurance 91

HIPAA Journal

JULY 4, 2023

Murfreesboro Medical Clinic & SurgiCenter (MMC) in Tennessee has recently confirmed that the protected health information of more than half a million patients was compromised in what it describes as “a series of attacks on our network and IT systems,” which were discovered on or around April 24, 2023.

Medicaid 72

Medicaid Medicaid Health Insurance Licensing 72

HIPAA Journal

MARCH 21, 2023

During that time they exfiltrated files that contained sensitive patient data, including names, contact information, Social Security number, Medicare/Medicaid IDs, health information, and health insurance information. The post Independent Living Systems Sued Over 4 Million-Record Data Breach appeared first on HIPAA Journal.

Fraud 98

Fraud Health Insurance Medicaid Medicaid 98

HIPAA Journal

AUGUST 31, 2023

As well as supplying private customers, the company works with more than five hundred health plans, managed care organizations, and other agencies to provide access to meals for people covered by Medicare and Medicare. At the time of publication, the company’s name does not appear on the HIPAA Breach Report.

Medicare 52

Medicare Medicare HIPAA Medicaid 52

HIPAA Journal

JANUARY 31, 2023

The lawsuit alleged the plaintiff and class members now face a high risk of identity theft and fraud as a result of the data breach and have incurred out-of-pocket expenses and lost time securing their accounts and protecting against the misuse of their personal and protected health information.

Ransomware 59

Ransomware Fraud Health Insurance HIPAA 59

Compliancy Group

SEPTEMBER 27, 2023

On September 25, 2023, Nuance Communications became the latest casualty of a vulnerability in Progress Software’s MOVEit Transfer software. Upon discovering the breach on May 31, 2023, Nuance wasted no time. The college discovered unauthorized access to its network from March 7th to March 31st, 2023.

HIPAA 52

HIPAA Compliance Health Insurance Fraud 52

HIPAA Journal

JANUARY 25, 2023

Logan Health Medical Center – was filed against Logan Health in the Montana Eighth Judicial District Court shortly after notification letters were mailed. Logan Health chose to settle the lawsuit to avoid further legal costs and the uncertainty of trial. The post Logan Health Proposes $4.3

Medical Billing 82

Medical Billing Fraud HIPAA Health Insurance 82

HIPAA Journal

MARCH 29, 2024

This is not the first attack of this kind to affect the Department of Mental Health. Similar attacks occurred on October 6, 2023, and October 24, 2023. Only one report is currently showing on the HHS’ Office for Civil Rights breach portal – dated December 22, 2023 – indicating 1,284 individuals were affected.

Fraud 61

Fraud HIPAA Health Insurance Nurses 61

HIPAA Journal

APRIL 18, 2023

The investigation concluded the account was compromised on January 20, 2023. The lawsuit alleges the plaintiff and class members face imminent and impending injury from the increased risk of identity theft and fraud.

HIPAA 77

HIPAA Fraud Licensing Health Insurance 77

HIT Consultant

JANUARY 3, 2023

But they have also expanded the attack surface at these organizations and increased the level of risk and vulnerabilities that could result in direct loss of proprietary information, direct financial damage including theft and fraud, and potential loss of life (in addition to regulatory fines and brand damage) the healthcare sector faces.

Compliance 52

Compliance Ransomware Fraud Regulatory Compliance 52

HIPAA Journal

FEBRUARY 13, 2023

The environment contained the protected health information of health plan members, including names, Social Security numbers, dates of birth, member ID numbers, and health insurance information. The deadline for objecting to or exclusion from the settlement is April 3, 2023. Claims must be submitted by May 1, 2023.

HIPAA 68

HIPAA Fraud Health Insurance 68

HIPAA Journal

JULY 27, 2023

Norton Healthcare, a Kentucky-based operator of more than 140 clinics and hospitals in Kentucky and Southern Indiana, is facing a class action lawsuit over a May 2023 cyberattack and data breach. On July 21, 2023, a class action lawsuit was filed in U.S.

Ransomware 52

Ransomware Fraud Licensing Health Insurance 52

HIPAA Journal

JANUARY 24, 2023

Time will tell whether this trend will continue in 2023, although the lull in data breaches appears to have continued so far this year with an atypically low number of breaches currently showing on the OCR data breach portal this month. million in 2023, although data breaches can be significantly more expensive.

Ransomware 113

Ransomware HIPAA Hospitals Fraud 113

MedTrainer

JANUARY 31, 2024

It was passed to combat fraud by government contractors during the conflict and set the stage for future compliance regulations. These laws require healthcare providers to establish internal controls and compliance programs to prevent fraud and abuse in the healthcare system. Who started the first healthcare compliance program?

Compliance 52

Compliance Fraud Governance ACA 52

HIPAA Journal

MAY 18, 2023

Third-party cybersecurity experts were engaged to investigate the breach and determined on or around April 7, 2023, that patient data was potentially accessed. The notification process was completed on April 10, 2023. Suspicious activity was detected in the account on February 13, 2023.

Ransomware 70

Ransomware Fraud HIPAA Health Insurance 70