HIPAA Journal

JANUARY 31, 2023

San Andreas Regional Center – was filed in the Superior Court of California in response to the breach alleging the healthcare provider was negligent for failing to implement reasonable cybersecurity measures to protect against ransomware attacks, despite being aware of the high risk of attacks on the healthcare sector.

Ransomware 62

Ransomware Fraud Health Insurance HIPAA 62

HIPAA Journal

MAY 25, 2023

In April 2023, Point32Health, the second-largest health insurer in Massachusetts and the parent company of Tufts Health Plan and Harvard Pilgrim Health Care, announced it suffered a ransomware attack that resulted in system outages, including the systems that serviced members, accounts, brokers, and providers.

Ransomware 83

Ransomware Health Insurance Fraud HIPAA 83

Healthcare IT Today

JANUARY 2, 2023

As we head into 2023, we wanted to kick off the new year with a series of 2023 Health IT predictions. We are going to see an increased demand for privacy-preserving technology in 2023, and therefore more investment in the space. during 2023. Check out our community’s healthcare Security and Risk predictions.

Ransomware 128

Ransomware Fraud Compliance Telemedicine 128

HIPAA Journal

JUNE 8, 2023

a provider of call center and customer experience software technology to large enterprises, has recently confirmed that it fell victim to a ransomware attack on a limited portion of its network. The post Alvaria Confirms November 2022 Hive Ransomware Attack appeared first on HIPAA Journal. (formerly Aspect Software, Inc.),

Ransomware 52

Ransomware Fraud HIPAA Health Insurance 52

HIPAA Journal

JUNE 5, 2023

Multiple class action lawsuits have been filed against the city of Oakland in California over a ransomware attack and data breach that involved the theft of the personal and protected health information of 13,000 current and former employees. The ransomware attack is understood to have started with phishing emails.

Ransomware 57

Ransomware Fraud HIPAA 57

HIPAA Journal

NOVEMBER 21, 2022

The Wisconsin-based dermatology practice, Forefront Dermatology, has agreed to settle a class action lawsuit filed on behalf of patients whose protected health information (PHI) was compromised in a ransomware attack in late May 2021. The final approval hearing has been scheduled for March 1, 2023.

Ransomware 67

Ransomware Fraud HIPAA Licensing 67

HIPAA Journal

MARCH 30, 2023

Ransomware and phishing continue to be the biggest cybersecurity concerns for healthcare organizations according to the February 2023 Current and Emerging Healthcare Cyber Threat Landscape report from Health-ISAC. Ransomware was the biggest concern for 2022 and 2023 with phishing and spear phishing in second.

Ransomware 98

Ransomware Fraud Governance Medical Billing 98

HIPAA Journal

MAY 18, 2023

The breach was detected by NextGen on March 30, 2023, and the forensic investigation confirmed hackers had access to its network between March 29, 2023, and April 14, 2023. This was the second data breach to be reported by NextGen this year, with the earlier incident being a BlackCat ransomware attack.

Ransomware 119

Ransomware Fraud HIPAA 119

HIPAA Journal

FEBRUARY 8, 2024

The incident was detected on November 9, 2023. Cybersecurity experts were engaged to assist with the investigation, which confirmed that unauthorized individuals accessed certain systems on or before September 27, 2023, and encrypted certain files. It is not clear from the notification letters when the intrusion occurred.

Ransomware 85

Ransomware Electronic Medical Records Licensing Health Insurance 85

HIPAA Journal

MARCH 3, 2023

The attack was conducted by the Sodinokibi ransomware group, which published some of the stolen data on its data leak site. Claims will also be accepted up to a maximum of $3,500 per claimant to cover documented, extraordinary losses that have not already been reimbursed, such as losses to fraud and identity theft.

Ransomware 84

Ransomware Fraud HIPAA 84

HIPAA Journal

FEBRUARY 15, 2023

The medical device manufacturer Electromed has proposed a $850,000 settlement to resolve claims related to a June 2021 ransomware attack and data breach involving the protected health information of 47,200 individuals. The deadline for objection to and exclusion from the settlement is March 2, 2023. A lawsuit – Lutz, et al.

Ransomware 87

Ransomware Fraud Licensing Health Insurance 87

HIPAA Journal

JUNE 15, 2023

Johns Hopkins University and Johns Hopkins Health System are investigating a May 31, 2023, cyberattack and data breach that targeted a widely used software tool. The security breach was discovered on April 4, 2023, and unauthorized access was immediately blocked. At this stage, it is unclear how many individuals have been affected.

Ransomware 101

Ransomware Health Insurance Fraud HIPAA 101

HIPAA Journal

JULY 6, 2023

UKG (Ultimate Kronos Group), a multinational provider of workforce management and human resources (HR) management services, has proposed a $6 million settlement to resolve claims related to a ransomware attack and data breach that was discovered in 2021. The deadline for exclusion from and objection to the settlement is September 18, 2023.

Ransomware 76

Ransomware COVID-19 Fraud HIPAA 76

HIPAA Journal

AUGUST 2, 2023

The Chattanooga Heart Institute (CHI) in Tennessee has recently announced that it identified a cyberattack on its network on April 17, 2023. Notification letters will be sent to the affected individuals in the coming weeks and credit monitoring, fraud consultation, and identity theft restoration services will be offered.

Licensing 73

Licensing Electronic Medical Records Ransomware Health Insurance 73

HIT Consultant

JANUARY 3, 2023

With the advent of ransomware-as-a-service combined with a lack of resources to investigate attacks in-house for healthcare organizations, elaborate and devastating cyber attacks against healthcare, specifically through business communication channels are likely to increase in scale and sophistication. .

Compliance 52

Compliance Ransomware Fraud Regulatory Compliance 52

HIPAA Journal

MARCH 13, 2023

According to the notification letter sent to the Maine Attorney General, unusual activity was detected within its internal network on January 28, 2023. Notification letters are now being mailed to all affected individuals.

Ransomware 100

Ransomware Fraud HIPAA 100

HIPAA Journal

SEPTEMBER 13, 2023

A class action lawsuit has been filed against the student healthcare insurer UnitedHealthcare Services, which does business as UnitedHealthcare Student Resources, over its MOVEit Transfer data breach in May 2023. Ransom demands were issued, and payment was required to prevent the publication of stolen data on the group’s data leak site.

Ransomware 70

Ransomware Fraud Health Insurance HIPAA 70

HIPAA Journal

JULY 12, 2023

District Court for the District of Maryland against Johns Hopkins University and Johns Hopkins Health System that allege a failure to properly secure and safeguard the protected health information of patients, resulting in the theft of their data by the Clop ransomware group.

Ransomware 79

Ransomware Fraud HIPAA 79

HIPAA Journal

SEPTEMBER 12, 2023

Seymour, IN-based Schneck Medical Center has settled a lawsuit with the Indiana attorney general, Todd Rokita, over a 2021 ransomware attack and data breach that affected 89,707 Indiana residents. Schneck Medical Center Compensates Patients for Losses Schneck Medical Center has also recently settled a consolidated class action lawsuit for $1.3

HIPAA 89

HIPAA Ransomware Health Insurance Fraud 89

Healthcare IT Today

JANUARY 19, 2024

According to the 2023 ForgeRock Breach Report , healthcare has consistently ranked as the most targeted industry by cybercriminals for the past five years. The 2023 Verizon Breach Report further highlights vulnerabilities with the healthcare sector, identifying web applications as the number one attack vector.

Fraud 89

Fraud Governance Ransomware Compliance 89

HIPAA Journal

JUNE 23, 2023

A lawsuit has been filed against Intellihartx, LLC, (aka ITx Companies), over a cyberattack by the Clop ransomware group that exploited a vulnerability in Fortra’s GoAnywhere Managed File Transfer (MFT) solution. Affected individuals were notified about the data breach on June 9, 2023, more than 4 months after the discovery of the attack.

HIPAA 90

HIPAA Ransomware Fraud Health Insurance 90

HIPAA Journal

AUGUST 11, 2023

Advanced Persistent Threat (APT) actors are known to be actively exploiting 9 of the vulnerabilities, and 7 are being actively exploited by ransomware gangs. The rise of weaponized exploits demands immediate, collective action to safeguard not only our technological integrity but, ultimately, patient safety.”

Electronic Medical Records 71

Electronic Medical Records Ransomware Fraud HIPAA 71

HIPAA Journal

MAY 18, 2023

Larger healthcare providers may temporarily divert ambulances and cancel some appointments following a ransomware attack but do not typically halt operations, but smaller healthcare providers may be left with little alternative. The notification process was completed on April 10, 2023.

Ransomware 76

Ransomware Fraud HIPAA Health Insurance 76

HIPAA Journal

JANUARY 24, 2023

Time will tell whether this trend will continue in 2023, although the lull in data breaches appears to have continued so far this year with an atypically low number of breaches currently showing on the OCR data breach portal this month. million in 2023, although data breaches can be significantly more expensive.

Ransomware 115

Ransomware HIPAA Hospitals Fraud 115

Healthcare IT Today

SEPTEMBER 7, 2023

The stolen data is often used to commit fraud, identity and intellectual theft, espionage, blackmail, extortion, etc., In March 2023, for example, Cerebral, a telehealth platform that provides online therapy and medication management to millions of users, reported a healthcare data breach that impacted more than 3.1

Fraud 112

Fraud Ransomware Compliance Hospitals 112

HIT Consultant

AUGUST 13, 2023

billion in 2023. Here are seven identified cybersecurity vulnerabilities that can reveal a patient’s data and expose these healthcare organizations to fraud and fines: Limited budgets. Ransomware. MSPs and MSSPs can strengthen a healthcare organization’s cyber posture by locking down all points of compromise. Phishing scams.

Ransomware 98

Ransomware Fraud Health Insurance HIPAA 98

HIPAA Journal

JULY 27, 2023

Norton Healthcare, a Kentucky-based operator of more than 140 clinics and hospitals in Kentucky and Southern Indiana, is facing a class action lawsuit over a May 2023 cyberattack and data breach. On July 21, 2023, a class action lawsuit was filed in U.S.

Ransomware 52

Ransomware Fraud Licensing Health Insurance 52

HIPAA Journal

APRIL 25, 2023

Santa Clara Family Health Plan Confirmed as Victim of Clop GoAnywhere Hack Santa Clara Family Health Plan has confirmed the 276,993-record data breach reported to the HHS’ Office for Civil Rights on March 30, 2023, was due to the hacking of Fortra’s GoAnywhere MFT solution by the Clop ransomware group.

Health Insurance 87

Health Insurance Public Health Ransomware Fraud 87

Healthcare IT Today

APRIL 25, 2024

For a healthcare entity, the data and information are viewed as extremely valuable as it includes PII as well as other health information that can be used for insurance fraud and identity theft. The cost of allowing a data breach to occur can cause an exponential financial impact on an organization.

Ransomware 77

Ransomware Compliance Fraud Governance 77

HIPAA Journal

JANUARY 30, 2023

This will be followed by the preconference basic training day on March 2, 2023. Advance registration is required and there are Early Bird Discounts available to HIPAA Journal readers who are able to register for the event before February 3, 2023.

US Department of Health and Human Services 85

US Department of Health and Human Services HIPAA Compliance Medicaid 85

Hall Render

APRIL 19, 2024

to Study Treatments for Vascular Abnormalities Federal Appeals Court Hears Arguments on Nation’s First Ban on Gender-affirming Care for Minors Jason Demke Hired as COO at Mercy Hospital Fort Smit Pulaski Tech Awarded $5.7M

Nursing Homes 40

Nursing Homes Nurses Hospitals Doctors 40

Hall Render

SEPTEMBER 1, 2023

Here’s why Ransomware gang reportedly selling Prospect Medical patient data Ransomware attack not the only headache for Prospect Medical Ridgecrest Regional Hospital receives $5.5 Newsom announces distressed hospital loan program Kaiser Permanente frontline workers strike could begin Oct.

COVID-19 40

COVID-19 Nurses Nursing Homes Hospitals 40

HIPAA Journal

MAY 1, 2024

CommonSpirit Health suffered a ransomware attack on October 2, 2022, that affected more than 100 CommonSpirit Health facilities across the United States. CommonSpirit Health , alleged that the plaintiff suffered injuries as a result of the breach, including more than $3,000 in bank account fraud that led to the closure of her account.

Fraud 101

Fraud Ransomware HIPAA Health Insurance 101

Hall Render

SEPTEMBER 16, 2022

Full 4th Circuit to tackle Medicaid fraud standard under False Claims Act. Massachusetts nurse pleads guilty in $100M fraud scheme. Aaron Weismann on ransomware attacks. NewYork-Presbyterian/Queens Hospital settles federal healthcare fraud allegations for $2.5M. Top 25 hospitals for orthopedics in 2023: Report.

US Department of Health and Human Services 40

US Department of Health and Human Services COVID-19 Nurses Nursing Homes 40

HIPAA Journal

MAY 17, 2023

In April 2023, the Money Message ransomware group announced it had breached the systems of PharMerica and its parent company, BrightSpring Health Services, and added both to its data leak site. That makes it the largest healthcare data breach to be reported by a single HIPAA-covered entity so far in 2023.

Ransomware 98

Ransomware HIPAA Fraud Health Insurance 98

HIPAA Journal

MAY 10, 2023

Suspicious activity was detected within its computer systems on February 1, 2023, and third-party cybersecurity experts were engaged to conduct a forensic analysis of the incident to determine the nature and scope of the attack. The investigation concluded on March 3, 2023, that files within its network were accessed.

Hospitals 100

Hospitals Ransomware Health Insurance Fraud 100

HIPAA Journal

MARCH 1, 2023

True Health New Mexico identified a security breach on October 5, 2021, with the investigation confirming that an unauthorized third party had gained access to its network and used ransomware to encrypt files. The deadline for objection to or exclusion from the settlement is April 14, 2023.

Fraud 101

Fraud Ransomware Health Insurance HIPAA 101