HIPAA Journal

SEPTEMBER 8, 2022

The Michigan law firm, Warner Norcross and Judd LLP, has issued notification letters to 255,160 individuals advising them about an October 2021 security breach in which files containing their personal and protected health information were potentially accessed and exfiltrated from its systems.

Fraud 71

Fraud Health Insurance Ransomware HIPAA 71

HIPAA Journal

SEPTEMBER 8, 2023

Just Kids Dental Suffers Ransomware Attack Acadia Health, LLC, doing business as Just Kids Dental, has started notifying 129,623 patients that some of their protected health information was stolen in an August 2, 2023, ransomware attack. The types of information involved varied from individual to individual.

Licensing 101

Licensing Ransomware Health Insurance HIPAA 101

HIPAA Journal

APRIL 8, 2024

De Felice , around 5TB of data was stolen by the Medusa group including the protected health information of an estimated 37,700 patients. The investigation uncovered evidence of unauthorized access to files that contained patient information.

Ransomware 71

Ransomware Health Insurance Licensing HIPAA 71

Total HIPAA

MAY 23, 2022

What is Protected Health Information (PHI)? The Health Insurance Portability and Accountability Act ( HIPAA ) is a 1996 federal law that regulates privacy standards in the healthcare sector. Today, the law serves the same purpose: to safeguard Protected Health Information in order to keep individuals safe.

HIPAA 98

HIPAA Due Diligence Compliance Health Insurance 98

HIPAA Journal

NOVEMBER 8, 2023

Third-party forensics experts were engaged to investigate the breach and determined that its systems were compromised between September 1, 2023, and September 5, 2023, and during that time, files were exfiltrated that contained personal and protected health information.

Ransomware 101

Ransomware Licensing Health Insurance HIPAA 101

Bill of Health

MARCH 9, 2024

By Susannah Baruch Concerned about privacy protections for pregnancy- and abortion-related health data in the post- Dobbs environment? It seems the CPC industry is collecting health information by “performing” HIPAA while operating under no legal obligation to protect the privacy of personal or health information.

HIPAA 250

HIPAA Licensing Health Insurance Compliance 250

HIPAA Journal

AUGUST 16, 2023

The information removed from its systems included names, addresses, dates of birth, Social Security numbers, driver’s license/State ID numbers, financial account information, payment card information, usernames/passwords, health insurance information, and medical information.

Licensing 73

Licensing Health Insurance HIPAA Public Health 73

HIPAA Journal

JULY 5, 2022

University Pediatric Dentistry in Buffalo, NY, has started notifying 6,843 patients that some of their protected health information has been exposed in an email security incident. A limited number of patients also had financial account information exposed.

Licensing 104

Licensing Electronic Medical Records Health Insurance Hospitals 104

HIPAA Journal

MAY 2, 2023

United HealthCare (UHC) has started notifying certain members that some of their protected health information may have been disclosed to unauthorized individuals as a result of credential stuffing attacks on the UHC mobile application. No Social Security numbers, financial information, or driver’s license numbers were exposed.

Licensing 97

Licensing Health Insurance Hospitals HIPAA 97

HIPAA Journal

OCTOBER 17, 2022

Phoenix, AZ-based Valle del Sol Community Health has notified 70,268 patients that some of their protected health information has been exposed. Valle de Sol said the investigation indicated unauthorized individuals had access to files containing sensitive patient data and that patient information may have been acquired.

Health Insurance 117

Health Insurance Licensing Fraud HIPAA 117

HIPAA Journal

NOVEMBER 16, 2022

Unauthorized individuals have gained access to the email system of the Administrative Fund of the Detectives’ Endowment Association of the Police Department of the City of New York (NYCDEA) and potentially viewed or obtained the protected health information of 21,544 individuals.

HIPAA 89

HIPAA Licensing Health Insurance Fraud 89

HIPAA Journal

MARCH 29, 2023

A third-party computer forensics firm was engaged to assist with the investigation and determined that there was unauthorized access to files containing patient information from January 20, 2023. OU Health – Stolen Laptop Computer OU Medicine Inc. Notification letters were mailed to the affected individuals on March 24, 2023.

Hospitals 103

Hospitals Ransomware Licensing Health Insurance 103

HIPAA Journal

AUGUST 2, 2023

The administrative service provider said suspicious activity was detected within its network in early December 2022, and the forensic investigation confirmed on December 15, 2022, that an unauthorized third party accessed parts of its computer network where personal health information was stored.

Licensing 73

Licensing Electronic Medical Records Ransomware Health Insurance 73

HIPAA Journal

MARCH 10, 2022

A round-up of 6 cyberattacks that have recently been reported by healthcare providers and business associates that resulted in the exposure and possible theft of patients’ protected health information. The files exfiltrated from its systems included the protected health information of patients.

Ransomware 126

Ransomware Licensing Health Insurance Hospitals 126

HIPAA Journal

FEBRUARY 8, 2024

Azura Vascular Care, a Pennsylvania-based operator of 70 outpatient vascular centers and ambulatory surgery centers in 25 states and Puerto Rico, notified the HHS’ Office for Civil Rights last month about a cybersecurity incident involving the protected health information of 348,000 patients.

Ransomware 85

Ransomware Electronic Medical Records Licensing Health Insurance 85

HIPAA Journal

MARCH 25, 2022

Ultimate Care said no reports have been received that indicate there has been any misuse of patient information; however, as a precaution against identity theft and fraud, individuals whose Social Security numbers were impacted have been offered complimentary one-year memberships with a credit monitoring service.

Health Insurance 111

Health Insurance Licensing Ransomware Fraud 111

HIPAA Journal

JUNE 21, 2023

Atlanta Women’s Health Group, P.C., has recently confirmed that the protected health information of up to 33,839 current and former patients has been exposed and potentially stolen in an April 2023 cyberattack. Around 5% of the affected individuals also had their financial information stolen.

Health Insurance 87

Health Insurance Licensing HIPAA Medicare 87

HIPAA Journal

MAY 17, 2022

The review of the files revealed they mostly contained protected health information such as names, addresses, medical information, and/or health insurance information. NuLife said no reports have been received to date to indicate any patient information has been misused.

Health Insurance 94

Health Insurance Licensing Ransomware HIPAA 94

HIPAA Journal

JUNE 8, 2023

The Iowa Department of Health and Human Services has announced there have been three separate breaches of the protected health information of Iowa Medicaid recipients in the past two months – two hacking incidents and an impermissible disclosure, all three of which involved third-party contractors.

Medicaid 83

Medicaid Medicaid Ransomware Health Insurance 83

HIPAA Journal

SEPTEMBER 9, 2022

Birmingham, AL-based Henderson & Walton Women’s Center (HWWC) has recently notified 34,306 patients that some of their protected health information may have been compromised as a result of a hacker gaining access to the email account of one of its employees. The information exposed varied from patient to patient.

Licensing 104

Licensing Health Insurance Fraud HIPAA 104

HIPAA Journal

JUNE 30, 2023

On April 29, 2023, it was confirmed that files had been exfiltrated that included patient information such as names, dates of birth, addresses, Social Security numbers, driver’s license numbers, and clinical information, such as provider names, dates of service, and/or diagnoses.

Licensing 93

Licensing Health Insurance Records Management HIPAA 93

HIPAA Journal

DECEMBER 14, 2022

CFA was informed about the breach on June 23, 2022. One of the compromised email accounts was determined to contain the protected health information of CFA members, including names, addresses, birth dates, Social Security numbers, health insurance information, medical information, and billing and claims information.

Health Insurance 113

Health Insurance HIPAA Licensing 113

HIPAA Journal

JULY 4, 2023

Murfreesboro Medical Clinic & SurgiCenter (MMC) in Tennessee has recently confirmed that the protected health information of more than half a million patients was compromised in what it describes as “a series of attacks on our network and IT systems,” which were discovered on or around April 24, 2023.

Medicaid 74

Medicaid Medicaid Health Insurance Licensing 74

HIPAA Journal

AUGUST 2, 2023

Allegheny County in Pennsylvania has recently confirmed that the protected health information of up to 689,686 individuals was compromised in a May 2023 hacking incident by the Clop threat group. Cognisight was informed about the hacking incident on May 31, 2023, and its forensic investigation of the incident concluded on June 5, 2023.

Licensing 89

Licensing HIPAA Health Insurance 89

HIPAA Journal

JANUARY 9, 2023

Third-party cybersecurity professionals were engaged to investigate the breach, with the investigation concluding on November 7, 2022, that protected health information was present in the compromised email accounts and may have been accessed or obtained. That information was found and forwarded to a third-party email account.

Licensing 112

Licensing HIPAA Health Insurance Governance 112

HIPAA Journal

FEBRUARY 16, 2022

The investigation confirmed its electronic medical record system and other clinical systems were not compromised in the attack; however, on January 13, 2022, Philadelphia FIGHT discovered the attacker had accessed non-clinical systems that housed files containing the protected health information of around 15,000 patients.

Electronic Medical Records 103

Electronic Medical Records Health Insurance Licensing HIPAA 103

HIPAA Journal

AUGUST 3, 2022

Fast Track Urgent Care, a network of urgent healthcare clinics in Florida, has confirmed that 258,411 individuals have had their protected health information exposed and potentially stolen in a ransomware attack on billing and practice management vendor, PracticeMax.

Ransomware 110

Ransomware Health Insurance Licensing HIPAA 110

HIPAA Journal

MAY 11, 2023

million settlement to resolve a class action lawsuit filed in response to a 2021 hacking incident in which the protected health information of 318,379 patients was compromised. The Californian home care service provider, SuperCare, has proposed a $2.25

HIPAA 88

HIPAA Health Insurance Licensing Hospitals 88

HIPAA Journal

NOVEMBER 8, 2022

Vision, has recently confirmed that the information of patients at several entities within its network has been exposed. Nationwide Optical Group was informed about the breach and requested U.S. No further information was subsequently provided about any dark web detections. USV Optical, a subsidiary of U.S.

Licensing 70

Licensing Health Insurance HIPAA 70

Bill of Health

JULY 13, 2023

We asked Susannah to share a bit about herself and her past work by way of introduction to Bill of Health ’s readers. You were involved in the enactment of the Genetic Information Nondiscrimination Act — can you share reflections from that experience? The following interview has been edited and condensed.

Health Insurance 246

Health Insurance Licensing Governance 246

HIPAA Journal

MARCH 18, 2022

the former operator of Eastern Ozarks Regional Health System in Cherokee Village, and owners Robert Becht of Hartsville, TN, and Theresa Hanson of Deland, FL, for mishandling the sensitive personal and protected information of thousands of individuals. I am holding the hospital and its owners accountable.”.

Licensing 117

Licensing HIPAA Hospitals Health Insurance 117

HIPAA Journal

APRIL 21, 2023

In late January, One Brooklyn Health confirmed that patient data had been compromised, and the attackers had access to information such as names, dates of birth, billing and claims data, treatment details, medical record numbers, prescriptions, health insurance information, and Social Security numbers.

Health Insurance 92

Health Insurance Licensing HIPAA Hospitals 92

HIPAA Journal

SEPTEMBER 30, 2022

Consent was then obtained to send notification letters on behalf of the affected healthcare provider clients, and work commenced on obtaining up-to-date contact information for the affected individuals. Those files were potentially accessed and may have been copied from its systems.

Licensing 107

Licensing HIPAA Health Insurance 107

HIPAA Journal

MAY 19, 2022

A comprehensive review of the affected files confirmed they contained information such as names, birth dates, addresses, Social Security numbers, driver’s license numbers, passport numbers, financial account information such as bank account and routing numbers, and online account usernames and passwords.

COVID-19 106

COVID-19 Health Insurance Licensing HIPAA 106

HIPAA Journal

MAY 2, 2022

6 data breaches have recently been reported by HIPAA-regulated entities that have collectively resulted in the exposure and potential theft of the protected health information of tens of thousands of individuals. Valley View Hospital did not state in its substitute breach notice what types of information had been compromised.

HIPAA 93

HIPAA Health Insurance Licensing Hospitals 93

HIPAA Journal

MARCH 20, 2023

The Birmingham, AL, Heart Hospital, Cardiovascular Associates, has recently announced that unauthorized individuals gained access to certain parts of its network between November 28, 2022, and December 5, 2022, and removed files containing patient information.

Licensing 97

Licensing HIPAA Health Insurance Hospitals 97

HIPAA Journal

MARCH 4, 2022

A round-up of data breaches that have recently been reported by healthcare organizations that have involved the exposure or theft of individuals’ personal and protected health information. Catholic Health Services Reports Breach of Employee Email Accounts.

Health Insurance 124

Health Insurance Licensing HIPAA 124