Compliancy Group

MAY 5, 2023

As healthcare professionals continue to work from home, many are facing the challenge of ensuring that they remain HIPAA compliant in a remote environment. HIPAA (Health Insurance Portability and Accountability Act) is a federal law that requires healthcare providers to secure protected health information (PHI) and maintain its privacy.

HIPAA 52

HIPAA Compliance Health Insurance Doctors 52

MedTrainer

FEBRUARY 19, 2024

The Health Insurance Portability and Accountability Act (HIPAA) has been a cornerstone healthcare regulation since 1996. Twenty-eight years later, the importance of HIPAA compliance in healthcare has not waned. What is HIPAA?

HIPAA 52

HIPAA Compliance Health Insurance Governance 52

HIPAA Journal

OCTOBER 7, 2022

On August 5, 2022, Anthem discovered that an unauthorized individual had gained access to a database and downloaded files containing plan members’ protected health information, including names, addresses, dates of birth, phone numbers, email addresses, Medicare ID numbers, and Medicaid ID numbers.

HIPAA 102

HIPAA Health Insurance Medicaid Medicaid 102

HIPAA Journal

DECEMBER 1, 2022

An unauthorized individual was found to have gained access to its network and downloaded files containing the protected health information of 45,785 patients. California Health Insurance Agency Suffers Data Breach Affecting 14,600 Patients.

Health Insurance 105

Health Insurance Ransomware HIPAA Governance 105

HIPAA Journal

JUNE 29, 2022

On June 25, 2022, a spokesperson for a threat group called DAIXIN Team contacted HIPAA Journal to share information about a ransomware attack and data theft incident at Fitzgibbon Hospital in Marshall, Missouri. DAIXIN Team was previously not known to HIPAA Journal and appears to be a new ransomware group.

Ransomware 119

Ransomware Hospitals HIPAA Health Insurance 119

AIHC

APRIL 10, 2024

HITECH is a critical aspect of the Health Insurance Portability & Accountability Act (HIPAA). Since 2009, HITECH has given “teeth” to HIPAA law. What’s the difference between HIPAA and HITECH? HIPAA guarantees patients access to their paper medical records. Understanding HIPAA is crucial.

Compliance 99

Compliance US Department of Health and Human Services HIPAA Electronic Medical Records 99

HIPAA Journal

FEBRUARY 8, 2023

During that time the third party downloaded a file that contained patient data. Financial information, contact information, dates of birth, Social Security numbers, health insurance information, or medical information were not accessed or stolen in the attack.

Medical Billing 91

Medical Billing HIPAA Health Insurance 91

HIPAA Journal

SEPTEMBER 8, 2023

For patients, the affected information included name, address, email, phone number(s), birth date, Social Security number, driver’s license number, health insurance policy information, treatment information including radiographic images, medical record number, account number, and health conditions.

Licensing 101

Licensing Ransomware Health Insurance HIPAA 101

HIPAA Journal

NOVEMBER 17, 2022

New York-Presbyterian Hospital has recently announced that unauthorized individuals gained access to one of its servers and attempted to download sensitive data. The security system detected the intrusion on September 8, 2022, and successfully blocked the attempted download. The electronic record system was unaffected.

Ransomware 83

Ransomware Health Insurance Hospitals Fraud 83

HIPAA Journal

JULY 31, 2023

The vulnerability was immediately addressed; however, the forensic investigation revealed hackers had exploited the vulnerability on May 28, 2023, and downloaded files from the system. The post 700,000 Highly Sensitive School Records Exposed Online appeared first on HIPAA Journal.

Health Insurance 88

Health Insurance Hospitals HIPAA Licensing 88

Total HIPAA

OCTOBER 28, 2019

A newsletter on the importance of importance of HIPAA logging requirements states this: 1. HIPAA log retention is also crucial; if the hospital had not archived the logs, investigators could not have found the incriminating records. What HIPAA Security Rule Mandates. What HIPAA Security Rule Mandates.

HIPAA 52

HIPAA Compliance Fraud Hospitals 52

HIPAA Journal

NOVEMBER 8, 2023

The compromised information included names, addresses, dates of birth, Social Security numbers, driver’s license numbers or state IDs, medical treatment information, and health insurance information. The post November 8, 2023, Healthcare Data Breach Round-Up appeared first on HIPAA Journal.

Ransomware 101

Ransomware Licensing Health Insurance HIPAA 101

Total HIPAA

APRIL 19, 2023

Introduction: As a health insurance agent, understanding the complexities of the Health Insurance Portability and Accountability Act, or HIPAA, is essential. One of the critical aspects of HIPAA is the Business Associate Agreement (BAA). What is included in a typical Business Associate Agreement?

HIPAA 52

HIPAA Compliance Health Insurance 52

Health Populi

JULY 24, 2023

In the program’s FAQs, one question clearly addresses this, transparently and in layperson’s terms: Q: “Do I need health insurance to use GNC Health?” ” A: “Nope — insurance isn’t needed or accepted.” Cost, cost, cost, cost, and cost — above quality of care.

Health Insurance 118

Health Insurance Medical Billing Licensing HIPAA 118

HIPAA Journal

FEBRUARY 16, 2023

While the investigation into the breach is ongoing, Edgepark Medical Supplies was informed that the files potentially accessed included names, email addresses, phone numbers, provider information, diagnoses, expected delivery dates, and health insurance information. The breach was confined to Rise Interactive’s systems.

HIPAA 87

HIPAA Health Insurance 87

MedTrainer

MARCH 8, 2024

Specific topic areas include: HIPAA: The Health Insurance Portability and Accountability Act is a federal law that governs the privacy and security of patient health information. Compliance training should cover the key provisions of HIPAA, including the Privacy Rule, Security Rule, and Breach Notification Rule.

Compliance 52

Compliance Fraud Governance HIPAA 52

HIPAA Journal

APRIL 18, 2022

numbers, financial account numbers, passport numbers, medical information, and/or health insurance information. While unauthorized email account access was confirmed, it was not possible to tell if any emails or attachments in the accounts had been viewed or downloaded.

Licensing 113

Licensing HIPAA Health Insurance Hospitals 113

HIPAA Journal

MAY 17, 2022

The review of the files revealed they mostly contained protected health information such as names, addresses, medical information, and/or health insurance information. Notification letters have now been sent to the 28,024 patients whose protected health information has potentially been compromised.

Health Insurance 94

Health Insurance Licensing Ransomware HIPAA 94

HIPAA Journal

APRIL 1, 2022

Last week, SRHD confirmed that the email account contained the protected health information of 1,260 individuals. That information may have been ‘previewed’ by an unauthorized individual, although no evidence was found to suggest information had been accessed or downloaded.

Fraud 130

Fraud HIPAA Licensing Health Insurance 130

HIPAA Journal

JUNE 1, 2023

The files potentially viewed or stolen included names, addresses, dates of birth, health insurance information, medical record numbers, and some health information. A review was conducted to determine if any files had potentially been downloaded to the laptop that could have been accessed.

Hospitals 84

Hospitals Electronic Medical Records HIPAA Health Insurance 84

HIPAA Journal

AUGUST 10, 2023

Omaha Health Insurance Company The Omaha Health Insurance Company (OHIC), part of Mutual of Omaha, has reported a security breach at a third-party vendor that exposed the records of individuals who were enrolled in the Medicare Part D Prescription Drug Plan, which was issued by Mutual of Omaha Rx.

Medicaid 52

Medicaid Medicaid Health Insurance HIPAA 52

Verisys

NOVEMBER 8, 2023

CMS.gov The Administrative Simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) required the creation of a standard, unique health identifier for healthcare providers, which the NPI satisfies. Why Are NPI Numbers Necessary? Complete instructions are found on the CMS website.

Fraud 97

Fraud HIPAA Medicare Medicare 97

AIHC

APRIL 10, 2024

HITECH is a critical aspect of the Health Insurance Portability & Accountability Act (HIPAA). Since 2009, HITECH has given “teeth” to HIPAA law. What’s the difference between HIPAA and HITECH? HIPAA guarantees patients access to their paper medical records. Understanding HIPAA is crucial.

Compliance 52

Compliance US Department of Health and Human Services HIPAA Electronic Medical Records 52

HIPAA Journal

FEBRUARY 13, 2023

The forensic investigation confirmed that AWS S3 storage buckets were accessed by the attackers, the contents of those buckets were downloaded, then the data in the buckets were deleted. The lawsuit alleged a failure to comply with its obligations under HIPAA and a failure to adhere to industry standard cybersecurity best practices.

HIPAA 73

HIPAA Fraud Health Insurance 73

MedTrainer

MARCH 8, 2024

Download the Ultimate List of Training Requirements for Long-Term Care to see a full list of federal training requirements for nursing homes and skilled nursing staff broken down by role, with the applicable standard, CMS violation category, and frequency. Training requirements vary by employee role and specific healthcare setting.

Compliance 52

Compliance Nursing Homes Nurses HIPAA 52

HIT Consultant

DECEMBER 18, 2023

Simply open a mobile app and download the report to your smartphone. In Europe, this is GDPR (General Data Protection Regulation), in America, it’s HIPAA (Health Insurance Portability and Accountability Act). AWS solutions require software compatible with HIPAA standards. Pros: Scalable for different needs.

Electronic Medical Records 105

Electronic Medical Records Doctors HIPAA Pharmaceutical Industry 105

HIPAA Journal

MARCH 10, 2022

The files exfiltrated from its systems included the protected health information of patients. Assisted by a third-party cybersecurity firm, APTG determined on January 7, 2022, that files containing the protected health information of 14,970 patients may have been exfiltrated from its network between December 23, 2021, and December 28, 2021.

Ransomware 126

Ransomware Licensing Health Insurance Hospitals 126

MedTrainer

JANUARY 31, 2024

Certified HIPAA Professional (CHP): Several entities, such as ECFC, offer versions of a CHP certification. This designation is ideal for healthcare professionals tasked with ensuring compliance with the Health Insurance Portability and Accountability Act (HIPAA). appeared first on MedTrainer.

Compliance 52

Compliance Compliance Officers Fraud Regulatory Compliance 52

Healthcare IT Today

DECEMBER 15, 2023

Simply open a mobile app and download the report to your smartphone. In Europe, this is GDPR (General Data Protection Regulation), in America, it’s HIPAA (Health Insurance Portability and Accountability Act). AWS solutions require software compatible with HIPAA standards.

Electronic Medical Records 105

Electronic Medical Records Doctors HIPAA Hospitals 105

HIPAA Journal

MAY 19, 2023

The app allows users to upload pictures of ovulation test strips that the app analyses to predict the user’s next ovulation cycle and the app allows users to upload health data from other devices and apps. The post $200,000 Penalty for Impermissible Sharing of Premom App Users’ Health Data appeared first on HIPAA Journal.

HIPAA 93

HIPAA Health Insurance 93

HIPAA Journal

MARCH 21, 2022

As previously reported on this site, JDC Healthcare Management detected malware within its IT network on or around August 9, 2021, with the forensic investigation into the security breach confirming the malware was downloaded onto its systems on July 27, 2021. Further information on the data breach has now been obtained.

Ransomware 103

Ransomware Licensing HIPAA Health Insurance 103

HIPAA Journal

DECEMBER 7, 2022

The review of those files revealed they contained information such as names, Social Security numbers, driver’s license numbers, government-issued ID numbers, financial information, medical information, and health insurance information. Notification letters started to be sent to affected individuals on November 18, 2022.

COVID-19 Vaccine 86

COVID-19 Vaccine COVID-19 Department of Veterans Affairs Licensing 86

Compliancy Group

JANUARY 6, 2022

Sensitive files containing PHI including patient names, provider names, dates of birth, and/or dates of service may have been downloaded from emails and attachments by the threat actor. Breach notification is required as part of complete HIPAA compliance. They have also been working with providers to notify affected individuals.

HIPAA 52

HIPAA Electronic Medical Records Compliance Hospitals 52

Compliancy Group

JUNE 29, 2022

The intruder accessed compromised information, including name, address, phone numbers, health insurance information, and medical information related to eye care services – protected health information. Download the free cybersecurity eBook to get tips on protecting your patient information. Email addresses.

Ransomware 98

Ransomware Electronic Medical Records HIPAA Compliance 98

HIPAA Journal

MARCH 29, 2024

Healthfirst The New York health insurance provider, Healthfirst, has recently notified 6,836 of its 2 million members about unauthorized access to its member portal. Healthfirst, which provides health plans under the names Healthfirst PHSP, Inc., Healthfirst Health Plan, Inc., The post MFA Bypassed in Cyberattack on L.A.

Fraud 66

Fraud HIPAA Health Insurance Nurses 66

Health Populi

FEBRUARY 15, 2021

Alissa Knight , an expert on hacking and cybersecurity, conducted this research by first downloading 30 mHealth apps in collaboration with the companies, to do penetration testing of their apps and APIs. While a social security number can fetch $1 by a data evil-doer, a credit card can score $110, and a full medical record as much as $1,000.

HIPAA 118

HIPAA Health Insurance Doctors Hospitals 118

MedTrainer

APRIL 11, 2024

Download Now Culture of Collaboration Developing a culture of compliance within healthcare extends beyond meeting legal obligations; it is a cornerstone for delivering safe, ethical, and top-tier care. Get tips and tricks for effective compliance training.

Compliance Officers 52

Compliance Officers Compliance Medicaid Medicaid 52