HIPAA Journal

SEPTEMBER 9, 2022

Those emails contained patient information such as names, dates of birth, Social Security numbers, medical information, health insurance information, driver’s license numbers, and state ID numbers. The information exposed varied from patient to patient. Notification letters were sent to all affected individuals in August.

Licensing 96

Licensing Health Insurance Fraud HIPAA 96

HIPAA Journal

OCTOBER 7, 2022

On August 5, 2022, Anthem discovered that an unauthorized individual had gained access to a database and downloaded files containing plan members’ protected health information, including names, addresses, dates of birth, phone numbers, email addresses, Medicare ID numbers, and Medicaid ID numbers.

HIPAA 94

HIPAA Health Insurance Medicaid Medicaid 94

HIPAA Journal

MARCH 10, 2022

The files exfiltrated from its systems included the protected health information of patients. Individuals whose Social Security number, driver’s license, state identification number, or financial account information may have been involved have been offered complimentary credit monitoring services. Dr. Douglas C.

Ransomware 122

Ransomware Licensing Health Insurance Hospitals 122

Verisys

NOVEMBER 8, 2023

Providers, employers, health plans, and payers use these numbers for billing purposes. CMS.gov The Administrative Simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) required the creation of a standard, unique health identifier for healthcare providers, which the NPI satisfies.

Fraud 97

Fraud HIPAA Medicare Medicare 97

HIPAA Journal

JULY 31, 2023

The Department of Health and Human Services’ Centers for Medicare and Medicaid Services (CMS) has confirmed that the PHI of approximately 612,000 current Medicare recipients was exposed in this incident and up to 645,000 individuals in total. The CMS said it is working with Maximus to provide notice to the affected individuals.

Governance 70

Governance Medicare Medicare Ransomware 70

MedTrainer

DECEMBER 7, 2023

The Medicaid and Health program of Idaho provides health coverage to eligible low-income adults, children, pregnant women, elderly adults, and people with disabilities in the state, offering a range of medical and health-related services.

Compliance 52

Compliance Licensing Compliance Officers Informed Consent 52

MedTrainer

MAY 6, 2024

Benefits of Enrolling Your Providers With Aetna Here are some key advantages of your organization enrolling providers with Aetna: Broad revenue opportunities: Aetna is the 6th-largest health insurer in the U.S. and offers your providers access to ~22 million medical insurance members.

Licensing 52

Licensing Malpractice Health Insurance Medicaid 52

Healthcare IT News - Telehealth

OCTOBER 2, 2020

Department of Health and Human Services to issue guidance to states about how to increase access to telehealth under Medicaid and the Children’s Health Insurance Program. Recommended voluntary billing codes, modifiers and place-of-service designations for telehealth and other virtual health care services.

US Department of Health and Human Services 149

US Department of Health and Human Services COVID-19 Medicaid Medicaid 149

HIPAA Journal

MARCH 14, 2022

CRMC said at this stage of the investigation it does not appear that the attackers gained access to its electronic medical record database; however, the files accessed or potentially accessed by the attackers included information such as patient names, addresses, birth dates, medical information, and health insurance information.

Electronic Medical Records 128

Electronic Medical Records Health Insurance HIPAA Licensing 128

Health Populi

MAY 21, 2020

Nearly every respondent in the study reported having health insurance coverage. Among those covered with insurance, one-half had employer-sponsored insurance, 1 in 4 Medicare, and 13%, individual cover. Another 8% had Medicaid or a state health insurance program.

COVID-19 159

COVID-19 Doctors Health Insurance Medicare 159

HIPAA Journal

MAY 16, 2022

The investigation into the breach determined multiple employee email accounts had been compromised, with the review of those accounts confirming they contained patient information such as names, birthdates, addresses, and health insurance member IDs. Financial information and Social Security numbers were not exposed.

Health Insurance 102

Health Insurance Ransomware HIPAA Licensing 102

HIPAA Journal

OCTOBER 17, 2022

The types of data potentially obtained by the attackers varied from individual to individual, and may have included the following data elements: name, contact information, demographic information, diagnosis, treatment information, information regarding mental/physical condition, medical record number, patient number, health insurance information, billing/claim (..)

Licensing 55

Licensing HIPAA Health Insurance Medicaid 55

HIPAA Journal

SEPTEMBER 14, 2022

MATLV said the investigation did not uncover any evidence indicating the misuse of patient information, but parts of the network that were accessed by the attackers contained files that included the protected health information of 75,628 individuals, which may have been viewed or exfiltrated in the attack.

Ransomware 82

Ransomware Licensing HIPAA Health Insurance 82

HIPAA Journal

AUGUST 31, 2023

In order to prevent a repeat of the incident, PurFood states in its breach notification letter that the company has taken a number of steps to strengthen its security network and is reviewing its existing policies and procedures to identify any additional measures and safeguards that may be necessary.

Medicare 52

Medicare Medicare HIPAA Medicaid 52

HIPAA Journal

MARCH 6, 2023

The types of information exposed varied from individual to individual and may have included names, addresses, medical information, health insurance information, Medicaid identification numbers, driver’s licenses, account and routing numbers, and Social Security numbers.

Electronic Medical Records 73

Electronic Medical Records HIPAA Licensing Nurses 73

HIPAA Journal

AUGUST 8, 2023

A comprehensive review of the affected files concluded on May 26, 2023, that the protected health information of 19,107 individuals had been compromised, including names, Social Security numbers, driver’s license numbers, medical treatment and/or diagnosis information, and health insurance information.

Ransomware 89

Ransomware Licensing HIPAA Health Insurance 89

MedTrainer

JANUARY 12, 2024

The adoption of electronic health records (EHRs), telemedicine , and data analytics has brought about new challenges and opportunities. Licensing and credentialing were introduced to regulate healthcare professionals and ensure minimum standards of care. Compliance in healthcare began to encompass billing, fraud, and abuse prevention.

Compliance 52

Compliance HIPAA Telemedicine ACA 52

Healthcare Compliance Blog

MARCH 31, 2022

The agencies received millions of dollars in funding from Medicaid, which is funded in part by the federal government, and much of that money was meant to pay the wages and benefits of their aides. Under the Wage Parity Law, which is funded by Medicaid, aides are to be paid a minimum amount in total compensation.

Medicaid 59

Medicaid Medicaid Governance Fraud 59

HIPAA Journal

APRIL 25, 2023

On February 13, 2023, NationsBenefits confirmed that the data compromised in the attack included protected health information such as name, address, phone number, gender, date of birth, health insurance number, medical ID number, Social Security number, date(s) of service, medical device or product purchased, and provider/caregiver name.

Health Insurance 81

Health Insurance Public Health Ransomware Fraud 81

MedTrainer

NOVEMBER 14, 2023

Exclusion from Government Programs: Entities found non-compliant may be barred from participating in government healthcare programs like Medicare and Medicaid. Loss of Licenses: Healthcare providers may lose their professional licenses, hindering their ability to practice.

Compliance 52

Compliance HIPAA Governance Medicare 52

HIPAA Journal

MAY 19, 2022

The breach was reported to the HHS’ Office for Civil Rights as affecting 114,007 individuals.

Licensing 105

Licensing HIPAA Health Insurance Medicaid 105

Kaiser Health News

JANUARY 19, 2022

” The changes are part of a 400-page proposed rule governing the federal health insurance marketplace and a few states that use the federal platform for their own exchanges. States also can revoke agents’ licenses. But they have only 60 days after discovering the fraudulent enrollment to do so.

ACA 71

ACA Health Insurance Licensing Governance 71

HIPAA Journal

APRIL 13, 2022

The hard drive was used for its Point-to-Point program in Exton, PA, and contained information such as names, Social Security Numbers, drivers’ license numbers, financial account information, payment card information, dates of birth, prescription information, diagnosis information, treatment information, treatment providers, health insurance information, (..)

Ransomware 110

Ransomware Licensing HIPAA Health Insurance 110

HIPAA Journal

AUGUST 12, 2022

A review of the affected email accounts revealed they contained patient data such as names, client health insurance information, Medicaid information, Social Security numbers, and limited information related to services received at Living Innovations.

Licensing 62

Licensing Health Insurance HIPAA Medicaid 62

MedTrainer

DECEMBER 4, 2023

The Mississippi Division of Medicaid administers health coverage programs to eligible residents, providing vital healthcare services to underserved and vulnerable populations in the state. Health insurance plans must cover telemedicine services to the same extent that services would be covered if they were provided in-person.

Compliance 52

Compliance Telemedicine Licensing Public Health 52

MedTrainer

NOVEMBER 29, 2023

The Tennessee Hospital Association (THA) is a membership organization that represents and supports hospitals and health systems across Tennessee, advocating for their interests and working to enhance healthcare quality and accessibility for all Tennesseans. TennCare is Tennessee’s managed Medicaid agency.

Compliance 52

Compliance Licensing HIPAA Medicaid 52

MedTrainer

SEPTEMBER 8, 2023

The breach occurred in 2013 when four unencrypted laptops containing the electronic protected health information (ePHI) of over 4 million patients were stolen from an Advocate Health administrative building. Details of the settlement indicate the submission of false claims to Medicare, Medicaid, TRICARE, and FECA programs.

Compliance 52

Compliance HIPAA Medicaid Medicaid 52

HIPAA Journal

MAY 25, 2022

The data includes names, dates of birth, ID numbers, expected due dates, referring physician names, sonographer names, ultrasound results, drug and alcohol use histories, other health information, and some records include credit card information and health insurance information.

Ransomware 123

Ransomware Fraud HIPAA Licensing 123

HIPAA Journal

NOVEMBER 3, 2022

The breach involved names, Social Security numbers, dates of birth, driver’s license numbers, financial account information, health insurance policy numbers, medical record numbers, Medicaid/Medicare IDs, and health information, including diagnosis and treatment information.

HIPAA 62

HIPAA Health Insurance Licensing Medicaid 62

Health Law RX

FEBRUARY 21, 2024

The Centers for Medicare & Medicaid Services (CMS) has revised certain payment policies under the Medicare physician fee schedule, and updated provider and supplier enrollment regulations. CMS recently published a final rule (the Final Rule ) effective January 1, 2024.

Medicare 52

Medicare Medicare Licensing Compliance 52

Healthcare Law Blog

MARCH 20, 2023

The national shortage of mental health professionals, combined with the urgency required to secure treatment for an at-risk population, places a significant strain on practitioners, specifically, and the mental health industry, at large. 6] Increase provider reimbursement strategies. Redefining the workforce.

Medicaid 52

Medicaid Medicaid Licensing ACA 52

HIPAA Journal

MARCH 16, 2023

The affected files contained information such as names, Social Security numbers, birth dates, patient ID numbers, treatment information, Medicare/Medicaid numbers, and health insurance information. The breach notice did not state when the attackers first gained access to its network.

Electronic Medical Records 62

Electronic Medical Records Health Insurance Ransomware HIPAA 62

Healthcare IT Today

AUGUST 17, 2022

They did say the following information may have been accessed by the unauthorized third party: Personal information involved in this incident may have included one or more of the following elements: (1) information to identify the individual (such as full name, date of birth, and address); (2) Social Security number, driver’s license/state ID number, (..)

Licensing 79

Licensing Hospitals Health Insurance Medicaid 79

MedTrainer

NOVEMBER 17, 2023

This model involves specific regulations and agreements with Medicare and Medicaid, impacting how healthcare providers in the state bill for services and receive payments. Both the Maryland Department of Health – Behavioral Health Administration and the Board of Physicians license medical and mental/behavioral health providers.

Compliance 52

Compliance Licensing Hospitals Health Insurance 52

HIPAA Journal

JUNE 8, 2023

Mercy Medical Center did not state whether ransomware was involved but said data had to be restored from backups and some data has likely been lost. Additional technical steps are being taken to try to recreate the lost data it was not possible to restore.

Ransomware 92

Ransomware HIPAA Licensing Health Insurance 92

Compliancy Group

SEPTEMBER 27, 2023

Sensitive Information Stolen The investigation revealed that personal information such as: Full names Social Security numbers Financial account details Passport numbers Medical records Health insurance policy information Dates of birth Credit or debit card information These had been removed from Lakeland’s network.

HIPAA 52

HIPAA Compliance Health Insurance Fraud 52

HIPAA Journal

NOVEMBER 7, 2022

Luke’s Health patients was present in the email accounts and could potentially have been accessed or acquired by the attackers. Luke’s Health was notified about the breach on September 1, 2022.

Electronic Medical Records 75

Electronic Medical Records Ransomware HIPAA Licensing 75