HIPAA Journal

APRIL 8, 2024

Between October 9, 2021, and October 17, 2021, hackers accessed the Planned Parenthood Los Angeles network , exfiltrated sensitive patient data, and used ransomware to encrypt files. Planned Parenthood discovered the ransomware attack on October 17, 2021, and confirmed on November 4, 2021, that the stolen files contained patient data.

Ransomware 74

Ransomware HIPAA Health Insurance Fraud 74

HIPAA Journal

NOVEMBER 21, 2022

The Wisconsin-based dermatology practice, Forefront Dermatology, has agreed to settle a class action lawsuit filed on behalf of patients whose protected health information (PHI) was compromised in a ransomware attack in late May 2021. Million Settlement to Resolve Ransomware Lawsuit appeared first on HIPAA Journal.

Ransomware 61

Ransomware Fraud HIPAA Licensing 61

HIPAA Journal

NOVEMBER 17, 2022

Salud Family Health Provides Update on September 2022 Ransomware Attack. Colorado-based Salud Family Health, a Federal Qualified Health Center (FQHC), has recently provided an update on a September 2022 cyberattack and has confirmed that patient data was potentially stolen. The electronic record system was unaffected.

Ransomware 77

Ransomware Health Insurance Hospitals Fraud 77

HIPAA Journal

SEPTEMBER 12, 2023

Seymour, IN-based Schneck Medical Center has settled a lawsuit with the Indiana attorney general, Todd Rokita, over a 2021 ransomware attack and data breach that affected 89,707 Indiana residents. Schneck Medical Center Compensates Patients for Losses Schneck Medical Center has also recently settled a consolidated class action lawsuit for $1.3

HIPAA 87

HIPAA Ransomware Health Insurance Fraud 87

HIPAA Journal

JUNE 15, 2023

In the meantime, Johns Hopkins urges all students, faculty staff, and their dependents to take immediate action to protect their personal information, including conducting reviews of their statements, credit reports, and accounts for unusual activity, and should consider placing a fraud alert and credit freeze with a national credit bureau.

Ransomware 97

Ransomware Health Insurance Fraud HIPAA 97

HIPAA Journal

FEBRUARY 15, 2023

The medical device manufacturer Electromed has proposed a $850,000 settlement to resolve claims related to a June 2021 ransomware attack and data breach involving the protected health information of 47,200 individuals.

Ransomware 82

Ransomware Fraud Licensing Health Insurance 82

HIPAA Journal

FEBRUARY 8, 2024

Azura Vascular Care said individuals who had sensitive information exposed such as Social Security numbers have been offered complimentary identity protection, credit monitoring, and fraud resolution services. Data exfiltration is common in ransomware attacks, but no evidence of data theft was identified during the forensic investigation.

Ransomware 80

Ransomware Electronic Medical Records Licensing Health Insurance 80

HIPAA Journal

FEBRUARY 21, 2022

EHRs usually contain all the information required for multiple types of fraud, including names, addresses, dates of birth, Social Security numbers, other government and state ID numbers, health data, and health insurance information. Malware, and especially ransomware, pose a significant threat to EHRs.

Ransomware 125

Ransomware Fraud HIPAA Health Insurance 125

HIPAA Journal

AUGUST 2, 2023

Notification letters will be sent to the affected individuals in the coming weeks and credit monitoring, fraud consultation, and identity theft restoration services will be offered. Cheyenne Radiology Group & MRI Reports December 2022 Ransomware Attack Cheyenne Radiology Group & MRI, P.C.

Licensing 74

Licensing Electronic Medical Records Ransomware Health Insurance 74

HIPAA Journal

MARCH 28, 2023

A New York law firm that suffered a LockBit ransomware attack has agreed to pay a financial penalty of $200,000 to the New York Attorney General to resolve alleged violations of New York General Business Law and the Privacy and Security Rules of the Health Insurance Portability and Accountability Act (HIPAA).

HIPAA 100

HIPAA Ransomware Malpractice Health Insurance 100

HIPAA Journal

SEPTEMBER 8, 2022

Notification letters were sent to affected individuals in August and information was provided on the steps that individuals can take to reduce the risk of identity theft and fraud, but it would appear that credit monitoring and identity theft protection services are not being offered. million individuals was compromised in the attack.

Fraud 95

Fraud Health Insurance Ransomware Licensing 95

HIPAA Journal

SEPTEMBER 7, 2022

The Morristown, VT-based healthcare provider, Lamoille Health Partners, is facing a class action lawsuit over a June 2022 ransomware attack that affected almost 60,000 of its patients. The attack was detected on June 13, 2022, with the investigation confirming the attackers gained access to its network the previous day.

HIPAA 103

HIPAA Ransomware Fraud Health Insurance 103

HIPAA Journal

SEPTEMBER 13, 2023

A class action lawsuit has been filed against the student healthcare insurer UnitedHealthcare Services, which does business as UnitedHealthcare Student Resources, over its MOVEit Transfer data breach in May 2023. Ransom demands were issued, and payment was required to prevent the publication of stolen data on the group’s data leak site.

Ransomware 63

Ransomware Fraud Health Insurance HIPAA 63

HIPAA Journal

FEBRUARY 14, 2023

Another lawsuit has been filed against Connexin Software over its August 2022 ransomware attack and data breach, which affected more than 2.2 On August 26, 2022, Connexin discovered hackers had gained access to its systems and used ransomware to encrypt files. million individuals.

Electronic Medical Records 82

Electronic Medical Records Ransomware HIPAA Fraud 82

HIPAA Journal

MARCH 25, 2022

Ultimate Care said no reports have been received that indicate there has been any misuse of patient information; however, as a precaution against identity theft and fraud, individuals whose Social Security numbers were impacted have been offered complimentary one-year memberships with a credit monitoring service.

Health Insurance 104

Health Insurance Licensing Ransomware Fraud 104

HIT Consultant

AUGUST 13, 2023

Here are seven identified cybersecurity vulnerabilities that can reveal a patient’s data and expose these healthcare organizations to fraud and fines: Limited budgets. Department of Health and Human Services (HHS) is currently investigating hundreds of cases associated with these phishing and hacking scams. Ransomware.

Ransomware 97

Ransomware Fraud Health Insurance Public Health 97

HIPAA Journal

SEPTEMBER 8, 2022

Notification letters were sent to affected individuals in August and information was provided on the steps that individuals can take to reduce the risk of identity theft and fraud, but it would appear that credit monitoring and identity theft protection services are not being offered. million individuals was compromised in the attack.

Fraud 71

Fraud Health Insurance Ransomware HIPAA 71

HIPAA Journal

JUNE 23, 2023

A lawsuit has been filed against Intellihartx, LLC, (aka ITx Companies), over a cyberattack by the Clop ransomware group that exploited a vulnerability in Fortra’s GoAnywhere Managed File Transfer (MFT) solution. The protected health information of 490,000 patients of its healthcare clients was compromised in the attack in late January.

HIPAA 88

HIPAA Ransomware Fraud Health Insurance 88

HIPAA Journal

DECEMBER 23, 2022

million patients and health plan members. OneTouch Point – Ransomware Attack Involving 4.11 Hackers had gained access to its network and used ransomware to encrypt files, with that information also potentially stolen in the attack. Professional Finance Company – Ransomware Attack Involving 1.92 Million Records.

HIPAA 80

HIPAA Ransomware Health Insurance Compliance 80

HIPAA Journal

OCTOBER 14, 2022

Large health systems store millions of patient records and even relatively small healthcare providers may store the records of hundreds of thousands of patients. Stolen data can be used to develop convincing spear phishing, smishing, and vishing campaigns, where the attacker impersonates a hospital or health insurer.

Ransomware 108

Ransomware HIPAA Health Insurance Hospitals 108

HIPAA Journal

JULY 27, 2023

Norton Healthcare has only disclosed limited information about the attack; however, the BlackCat ransomware group announced that it was behind the cyberattack and leaked some of the data stolen from Norton Healthcare on its data leak site.

Ransomware 52

Ransomware Fraud Licensing Health Insurance 52

HIPAA Journal

APRIL 25, 2023

Santa Clara Family Health Plan Confirmed as Victim of Clop GoAnywhere Hack Santa Clara Family Health Plan has confirmed the 276,993-record data breach reported to the HHS’ Office for Civil Rights on March 30, 2023, was due to the hacking of Fortra’s GoAnywhere MFT solution by the Clop ransomware group.

Health Insurance 83

Health Insurance Public Health Ransomware Fraud 83

HIPAA Journal

MARCH 24, 2022

The breach notice uploaded to Chelan Douglas Health District website does not disclose when the breach was detected but says a third-party cybersecurity company was engaged to investigate the cyberattack and confirmed that its network was accessed by unauthorized individuals between July 2 and July 4, 2021.

Ransomware 123

Ransomware Fraud Hospitals HIPAA 123

HIPAA Journal

JANUARY 24, 2023

The theft of protected health information places patients and health plan members at risk of identity theft and fraud, but by far the biggest concern is the threat to patient safety. Multiple studies have identified an increase in mortality rates at hospitals following ransomware attacks and other major cyber incidents.

HIPAA 114

HIPAA Ransomware Hospitals Fraud 114

Healthcare IT Today

JANUARY 2, 2023

Healthcare is the number one type of data hackers set their sites on, and healthcare identity fraud is prevalent. For example, a report from Sophos found that 66% of healthcare organizations reported ransomware attacks last year, jumping from 34% in 2020. Ransomware attacks will continue to increase.

Ransomware 125

Ransomware Fraud Compliance Telemedicine 125

HIPAA Journal

MAY 18, 2023

Larger healthcare providers may temporarily divert ambulances and cancel some appointments following a ransomware attack but do not typically halt operations, but smaller healthcare providers may be left with little alternative. That information related to patients who had received healthcare services between March 2012 and November 2022.

Ransomware 68

Ransomware Fraud HIPAA Health Insurance 68

HIT Consultant

JANUARY 3, 2023

With the advent of ransomware-as-a-service combined with a lack of resources to investigate attacks in-house for healthcare organizations, elaborate and devastating cyber attacks against healthcare, specifically through business communication channels are likely to increase in scale and sophistication. .

Compliance 52

Compliance Ransomware Fraud Regulatory Compliance 52

HIPAA Journal

AUGUST 17, 2022

In April 2020, Musculoskeletal Institute, dba Florida Orthopaedic Institute, discovered an unauthorized third party had gained access to a server that contained patients’ protected health information (PHI) and used ransomware to encrypt files.

Ransomware 73

Ransomware Fraud HIPAA Health Insurance 73

HIPAA Journal

SEPTEMBER 28, 2022

Wolfe Clinic said names, addresses, birth dates, Social Security numbers, diagnostic information, and health insurance information were potentially compromised. At the time of issuing notifications, Wolfe Clinic had not received any reports of identity theft and fraud related to the Eye Care Leaders data breach.

Electronic Medical Records 71

Electronic Medical Records Ransomware Fraud HIPAA 71

Medisys Compliance

APRIL 27, 2022

The Health Insurance Portability and Accountability Act (HIPAA) was introduced in year 1996. As the name suggests, it was created to ensure that all ‘protected health information’ was appropriately secured and restricted access to be given only to authorized individuals. Another goal was to prevent healthcare fraud.

HIPAA 52

HIPAA Medical Billing Outsourcing Medical Billing Compliance 52

HIPAA Journal

JANUARY 27, 2023

Des Plaines, IL-based Lutheran Social Services of Illinois, one of the largest providers of social services in the state, has announced that its systems were compromised and ransomware was used to encrypt files. Both healthcare organizations were recently added to the data leak site of the BlackCat ransomware group.

Ransomware 87

Ransomware HIPAA Fraud Hospitals 87

AIHC

APRIL 10, 2024

Checklist for Individual & Small Group Practices Written by: Nancie Lee Cummins, CFE, CHA, CIFHA, OHCC, CHCM, CHCO, CORCM This article provides an overview of Health Information Technology for Economic and Clinical Health Act (HITECH) and basic checklist of policies and procedures for compliance of smaller health care organizations.

Compliance 52

Compliance US Department of Health and Human Services HIPAA Electronic Medical Records 52

Hall Render

OCTOBER 27, 2023

Ransomware attacks against hospitals put patients’ lives at risk, researchers say States, FTC continue to target noncompetes: 3 updates The best hospital in each state, per Newsweek What to know about Stark law’s $9.2M Here’s why Grady Health System recognized as health care I.T.

US Department of Health and Human Services 40

US Department of Health and Human Services Nurses Nursing Homes Hospitals 40

Hall Render

SEPTEMBER 1, 2023

Here’s why Ransomware gang reportedly selling Prospect Medical patient data Ransomware attack not the only headache for Prospect Medical Ridgecrest Regional Hospital receives $5.5 facility near Calvin University Health care industry groups back Whitmer’s call for prescription drug cost review board Michigan Doctor to Pay $6.5

COVID-19 40

COVID-19 Nurses Nursing Homes Hospitals 40

Hall Render

SEPTEMBER 16, 2022

4 Health Systems Join Provider-Created Data Collective to Improve Care. Full 4th Circuit to tackle Medicaid fraud standard under False Claims Act. Census: 7% of people in Illinois lack health insurance. Steward Health Care names new flagship hospital president. Aaron Weismann on ransomware attacks.

US Department of Health and Human Services 40

US Department of Health and Human Services COVID-19 Nurses Nursing Homes 40

Compliancy Group

JANUARY 25, 2022

The 2015 total included the largest single healthcare data breach on record – health insurer Anthem’s 77.8 Other findings in the report included: Ransomware-related data breaches have doubled in each of the past two years. We may look back at 2021 as the year when we moved from the era of identity theft to identity fraud.

HIPAA 98

HIPAA Ransomware Governance Compliance 98

Compliancy Group

MAY 27, 2022

35% of healthcare breaches involved ransomware attacks, vs. 20% in 2020. The average ransomware payment for healthcare was $875,784, about one-third less than the 2020 payment. 82% of ransomware attacks claimed to have removed data before encryption. Partnership Health Plan (California) .

HIPAA 98

HIPAA Ransomware Compliance Hospitals 98