Phishing Attack on Legacy Health Results In Exposure of 38,000 Patients’ PHI
Legacy Health has discovered an unauthorized individual has gained access to its email system and the protected health information (PHI) of approximately 38,000 patients. The Portland, OR-based health...
View ArticleJuly 2018 Healthcare Data Breach Report
July 2018 was the worst month of 2018 for healthcare data breaches by a considerable distance. There were 33 breaches reported in July – the same number of breaches as in June – although 543.6% more...
View ArticleCouple Sues McAlester Hospital Over Alleged Snooping and Impermissible...
Following the accidental drowning of their adopted son, Denise and Wayne Russell were contacted by the child’s birth mother who made threats against their family. The phone call from the birth mother...
View ArticleNIST Finalizes Guidance on Securing Wireless Infusion Pumps in Healthcare...
The National Cybersecurity Center of Excellence (NCCoE) and the National Institute of Standards and Technology (NIST) have released the final version of the NIST Cybersecurity Practice Guide for...
View ArticleNY Attorney General Fines Arc of Erie County $200,000 for Security Breach
The Arc of Erie County has been fined $200,000 by the New York Attorney General for violating HIPAA Rules by failing to secure the electronic protected health information (ePHI) of its clients. In...
View ArticlePlaintiffs in Class Action Claim Premera Blue Cross Destroyed Key Evidence
There has been a twist in the class action lawsuit filed by victims of the 2015 Premera Blue Cross data breach. The plaintiffs allege Premera Blue Cross willfully destroyed evidence of data theft. In...
View ArticleHealthcare Organizations Reminded of Importance of Securing Electronic Media...
In its August 2018 cybersecurity newsletter, the Department of Health and Human Services’ Office for Civil Rights has reminded HIPAA-covered entities of the importance of implementing physical,...
View ArticleNIST to Launch Privacy Framework to Help Companies Protect the Privacy of...
In 2014, the National Institute of Standards and Technology (NIST) published its Cybersecurity Framework – A framework of computer security guidance to help private sector companies assess their...
View ArticleHurricane Florence: OCR Issues Guidance on Appropriate Sharing of Health...
On Wednesday, September 12, 2018, President Trump approved a request for a federal emergency declaration in the state of Virginia and made FEMA resources available for the state. The Secretary of the...
View ArticleTexas Nurse Fired for Social Media HIPAA Violation
A nurse at a Texas children’s hospital has been fired for violating Health Insurance Portability and Accountability Act (HIPAA) Rules by posting protected health information on a social media website....
View ArticleCMS: Fairview Southdale Hospital Videotaped Patients Without Knowledge or...
The HHS’ Centers for Medicare and Medicaid Services (CMS) has investigated Fairview Southdale Hospital in Edina, MN over an alleged violation of patient privacy and discovered that some patients were...
View ArticleCalifornia Consumer Privacy Act Amendment Confirms HIPAA-Covered Entities Exempt
In June 2018, the legislature in California passed the California Consumer Privacy Act (CCPA) which introduced major changes to state law to protect the privacy of consumers. CCPA introduced new...
View Article$999,000 in HIPAA Penalties for Three Hospitals for Boston Med HIPAA Violations
Three hospitals that allowed an ABC film crew to record footage of patients as part of the Boston Med TV series have been fined $999,000 by the Department of Health and Human Services’ Office for Civil...
View ArticleAugust 2018 Healthcare Data Breach Report
August was a much better month for the healthcare industry with fewer data breaches reported than in July. In August, 28 healthcare data breaches were reported to the HHS’ Office for Civil Rights, a...
View ArticleUMass Memorial Health Care Pays $230,000 to Resolve Alleged HIPAA Violations
Mass Memorial Health Care has been fined $230,000 by the Massachusetts attorney general for HIPAA failures related to two data breaches that exposed the protected health information (PHI) of more than...
View ArticleHIPAA Quiz Launched by Compliancy Group
A new HIPAA Quiz has been launched by the Compliancy Group, which serves as a quick and easy free tool to assess the current state of HIPAA compliance in an organization. Healthcare organizations...
View ArticleStudy Reveals 70% Increase in Healthcare Data Breaches Between 2010 and 2017
There has been a 70% increase in healthcare data breaches between 2010 and 2017, according to a study conducted by two physicians at the Massachusetts General Hospital Center for Quantitative Health....
View ArticleNIST Releases Guidance on Managing IoT Cybersecurity and Privacy
The National Institute of Standards and Technology (NIST) has released a draft guidance document that aims to help federal agencies and other organizations understand the challenges associated with...
View ArticleHealthcare Industry Highly Susceptible to Phishing Attacks and Lags Other...
Phishing is one of the leading causes of healthcare data breaches. The healthcare industry is extensively targeted by phishers who frequently gain access to healthcare data stored in email accounts. In...
View ArticleFDA Issues Medical Device Cybersecurity Regional Incident Preparedness and...
On October 1, 2018, the U.S. Food and Drug Administration released a Medical Device Cybersecurity Regional Incident Preparedness and Response Playbook for healthcare delivery organizations to help them...
View Article