Healthcare organizations that fail to meet HIPAA Privacy, Security, or Breach Notification Rules can face HIPAA violation fines. Find out who has been fined and how they could have prevented penalties.
The Complaint and the Settlement In May 2020, a complaint was filed against Hackensack Meridian Health alleging that the skilled nursing facility failed to provide a patient’s personal representative [...]
In October 2023, HHS settled its first ransomware investigation with a business associate for $100,000. The Ransomware Attack and OCR Investigation In February 2019, Green Ridge Behavioral Health submitted [...]
The Incident and the Investigation In May 2015, the NYPD informed Montefiore Medical Center that there was evidence that patient information had been stolen from the hospital’s database. It [...]
HIPAA Privacy Rule 2023: It’s Still the Right of Access The HIPAA Right of Access includes the right to inspect or obtain a copy of protected health information (PHI), [...]
2023 OCR Fines: Who and Why In 2023, the HHS OCR settled cases with eight covered entities and four business associates for potential HIPAA violations. Fines ranged from $15,000 [...]
In a press release announcing the most recent right of access settlement, OCR Director Melanie Fontes Rainer stated, “Health care providers must make responding to parents’ or patients’ request [...]
The Phishing Incident and Its Aftermath On March 30, 2021, a hacker accessed Lafourche Medical Group’s systems through an employee email account. As a result, 34,862 patients’ protected health [...]
St. Joseph’s Exposes Patient Information to a News Reporter During the height of the COVID-19 pandemic, Saint Joseph’s Medical Center was the subject of an Associated Press article discussing [...]
The Attack and the Settlement After filing a breach report with OCR in 2019 reporting a ransomware attack that compromised the protected health information (PHI) of 206,695 patients, the [...]
This agreement stems from two OCR investigations triggered by a significant breach report and an eye-opening media article highlighting a distinct security incident. As guardians of privacy and security [...]
© 2025 Compliancy Group LLC. All Rights Reserved | Terms of Use | Privacy Policy | Audit Response Terms of Use
