Analysis of February 2018 Healthcare Data Breaches
Our February 2018 healthcare data breach report details the major data breaches reported by healthcare providers, health plans, and business associates in February 2018. Summary of February 2018...
View ArticleHealthcare Data Breach Statistics
We have compiled healthcare data breach statistics from October 2009 when the Department of Health and Human Services’ Office for Civil Rights first started publishing summaries of healthcare data...
View ArticleInsider Data Breaches Continue to Plague the Healthcare Industry
Protenus has published its February Healthcare Breach Barometer Report. The report includes healthcare data breaches reported to the Department of Health and Human Services’ Office for Civil Rights or...
View ArticleJail Terms for HIPAA Violations by Employees
The penalties for HIPAA violations by employees can be severe, especially those involving the theft of protected health information. HIPAA violations by employees can attract a fine of up to $250,000...
View ArticleBanner Health Anticipates Potential Financial Penalty from OCR over 2016...
According to a financial report issued by Banner Health, OCR is investigating the colossal 2016 Banner Health data breach which saw the protected health information of 3.7 million patients exposed. The...
View ArticleATI Physical Therapy Data Breach Impacts 35,000 Patients
ATI Physical Therapy has discovered the protected health information of more than 35,000 patients has potentially been accessed after threat actors gained access to the email accounts of some of its...
View ArticleHow to Become HIPAA Compliant
If you would like to start doing business with healthcare organizations you will need to know how to become HIPAA compliant, what HIPAA compliance entails, and how you can prove to healthcare...
View ArticleHIPAA Rules on Contingency Planning
In its March 2018 cybersecurity newsletter, OCR explained HIPAA Rules on contingency planning and urged healthcare organizations to plan for emergencies to ensure a return to normal operations can be...
View ArticleSouth Dakota Enacts Data Breach Notification Law as Congress Considers...
South Dakota has been slow to introduce legislation to improve protections for consumers affected by breaches of their personal information. Laws have already been introduced in 48 states that require...
View ArticleStudy Suggests Improper Disposal of PHI is Commonplace
A recent study (published in JAMA) has highlighted just how frequently hospitals are disposing of PHI in an insecure manner. While the study was conducted in Canada, which is not covered by HIPAA, the...
View ArticleLegislation Changes and New HIPAA Regulations in 2018
The policy of two out for every new regulation introduced means there are likely to be few, if any, new HIPAA regulations in 2018. However, that does not mean it will be all quiet on the HIPAA front....
View ArticleSecurity Breaches in Healthcare in the Last Three Years
There have been 955 major security breaches in healthcare in the last three years that have resulted in the exposure/theft of 135,060,443 healthcare records. More than 41% of the population of the...
View ArticleVerizon PHI Breach Report Confirms Healthcare Has Major Problem with Insider...
Verizon has released its annual Protected Health Information Breach Report which delves deep into the main causes of breaches, why they occur, the motivations of internal and external threat actors,...
View ArticleAlabama Governor Enacts Data Breach Notification Act
Alabama has become the 50th state to require companies to issue breach notifications to individuals whose personal information has been exposed or compromised as a result of a data breach. Governor Kay...
View ArticleHIPAA Compliance for Pharmacies
HIPAA is a federal law that establishes the acceptable uses and disclosures of protected health information (PHI), sets standards for the secure storage and transmission of PHI, and gives patients the...
View ArticleLack of Security Awareness Training Leaves Healthcare Organizations Exposed...
A recent study conducted by the Ponemon Institute on behalf of Merlin International has revealed healthcare organizations are failing to provide sufficient security awareness training to their...
View ArticleWhat is Protected by HIPAA?
The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is an important legislative Act that requires healthcare organizations that conduct transactions electronically to develop and...
View ArticleGAO Discovers Inconsistencies in CMS Oversight of Medicare Beneficiary Data...
In response to recent data breaches, the chairmen of the U.S Senate Committee on Finance, the House Committee on Ways and Means, and the House Committee on Energy and Commerce requested the U.S....
View ArticleWhat is the Relationship Between HITECH, HIPAA, and Electronic Health and...
The Health Insurance Portability and Accountability Act (HIPAA) was signed into law in August 1996, and was updated by the HIPAA Privacy Rule in 2003 and the HIPAA Security Rule in 2005, but how did...
View ArticleHow Long Does It Take to Breach a Healthcare Network?
A recent survey of hackers, incident responders, and penetration testers has revealed the majority can gain access to a targeted system within 15 hours, but more than half of hackers (54%) take less...
View Article