FBI Ransomware Guidance Issued
In early October of 2019, the Department of Justice issued FBI Ransomware Guidance. The FBI Ransomware Guidance is a public service announcement that contains updated information [...]
Hospital Data Breaches and Patient Deaths
Researchers for the journal Health Services Research recently conducted a study to determine whether there is a relationship between hospital data breaches and patient deaths. Of particular interest was [...]
HIPAA Genetic Information
Before passage of the 2013 HIPAA Omnibus Rule, genetic information was not specifically included in the HIPAA regulations’ definition of protected health information (PHI). With passage [...]
HIPAA Requirements for Sending PHI
Healthcare entities require a means to easily share protected health information (PHI). When sending PHI it is imperative to keep HIPAA requirements in mind. The Health [...]
What is a Unique Patient Identifier?
When HIPAA was enacted in 1996, the law called for development of a unique patient identifier (sometimes referred to as a “national patient identifier”). In 1999, Congress passed legislation [...]
What is the Ryuk Ransomware Decryptor Bug?
In 2019 alone, at least 3 managed service providers (MSPs) have been attacked by Ryuk ransomware. A Russian-based eCrime group that calls itself “WIZARD SPIDER” has [...]
November Healthcare Breaches Affected More Than 400,000 Patients
Healthcare breaches reported to the Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) in November affected 443,344 patients. There were a total of 26 November [...]
HIPAA Business Email Compromise
A cyberthreat known as business email compromise has caused businesses, religious institutions, educational institutions, non-profits, and other companies, to lose billions of dollars since the FBI first began tracking [...]
HIPAA Compliant Apps with Microphone Access?
Managing HIPAA compliance can be a daunting task. The Health Insurance Portability and Accountability Act (HIPAA) requires healthcare organizations, and the vendors that service them, to [...]
Is a Covered Entity’s Sale of PHI Permitted Under HIPAA?
Under the HIPAA Privacy Rule, sale of PHI is generally prohibited. What Constitutes a Sale of PHI? Generally, under the HIPAA Privacy Rule, covered entities and [...]
