In this final article in our 3-part series on ransomware in healthcare, we discuss current trends and, more importantly, how companies of all sizes can protect themselves and the PHI they hold from this growing threat. One trend relates to how criminals are targeting their victims. Depending on how secure the target is, it may […]
The Rise of Ransomware in Healthcare (Part 3 of 3) Read More »
In this second installment of the series, we discuss the impact of ransomware specifically on the healthcare industry. In the 15th annual Ponemon Institute “Cost of a Data Breach Report” published by IBM Security earlier this year, hundreds of breached companies and thousands of individuals were interviewed across 17 different industries and 17 countries/regions. For
The Rise of Ransomware in Healthcare (Part 2 of 3) Read More »
This is the first in a series of articles about the rise of ransomware in the healthcare industry. This first part deals with how and why ransomware has become so prevalent. The second part explains the reasons why ransomware attacks are so prevalent in the healthcare industry, in particular. The third part discusses some of
The Rise of Ransomware in Healthcare (Part 1 of 3) Read More »
Right of access of individuals to PHI is another regulation under HIPAA that has not gotten a lot of attention until this year. Under 45 CFR § 164.524, “an individual has a right of access to inspect and obtain a copy of protected health information about the individual.” Earlier this week, OCR announced its first
Right of Access HIPAA Violations Read More »
Whether you are audited randomly or as a result of a breach or a complaint, you will be asked to provide evidence of past security/risk assessments and plans/actions for remediating any deficiencies identified in these assessments. This company’s failure to conduct risk assessments was a key factor in the settlement agreement reached with the Office
Annual Security/Risk Assessments Critical to HIPAA Compliance Read More »
The 13th annual Cost of a Data Breach study from IBM and the Ponemon Institute showed that healthcare breaches cost an average of $408 per record, nearly triple the overall average across all industries and nearly double the second most costly industry (financial) to remain the highest of all industries for the 8th consecutive year.
Healthcare Data Breach Costs Remain Highest Among Industries Read More »
A Colorado hospital has agreed to pay $111,400 to the Office for Civil Rights (OCR) at the US Dept of Health and Human Services (HHS) and to adopt a substantial two-year corrective action plan to settle potential HIPAA violations after a former employee allegedly continued to have remote access to the hospital’s web-based scheduling calendar.
Colorado Hospital HIPAA Settlement Costs Over $100k Read More »
Another example of the consequences of neglecting to conduct annual security risk assessments and having the required Business Associate Agreements in place with your business associate vendors. This case resulted in a $500,000 monetary settlement as well as a 2-year corrective action plan (CAP) for potential violations of the HIPAA Security Rule. The link below
Florida contractor physicians’ group shares protected health info Read More »
Think that breaches are rare or are private? Think again. Section 13402(e)(4) of the HITECH Act requires the Secretary of the Department of Health and Human Services (DHHS) Office for Civil Rights (OCR) to post a list of breaches of unsecured protected health information (PHI) affecting 500 individuals or more. There are currently over 400
Elite Dental Associates of Dallas has agreed to pay $10,000 to the Office for Civil Rights (OCR) and adopt a two-year Corrective Action Plan (CAP) to settle potential violations of the HIPAA Privacy Rule. The HHS press release can be found here and includes a copy of the resolution agreement: https://www.hhs.gov/about/news/2019/10/02/dental-practice-pays-10000-settle-social-media-disclosures-of-patients-phi.html
Dallas Dental Practice Settles Social Media Disclosure Case Read More »
